IT Cybersecurity Co-Op (Spring 2027)

Wave Life Sciences is a biotechnology company focused on unlocking the broad potential of RNA medicines to transform human health. Our RNA medicines platform, PRISM, combines multiple modalities, chemistry innovation and deep insights in human genetics to deliver scientific breakthroughs that treat both rare and prevalent disorders. Our toolkit of RNA-targeting modalities including RNAi silencing and RNA editing provides us with unmatched capabilities for designing and sustainably delivering candidates that optimally address disease biology. Our diversified pipeline is focused on our obesity, alpha-1 antitrypsin deficiency and PNPLA3 I148M liver disease programs and includes clinical programs for Duchenne muscular dystrophy and Huntington's disease, as well as several preclinical programs utilizing our versatile RNA medicines platform.  Driven by the calling to "Reimagine Possible", we are leading the charge toward a world in which human potential is no longer hindered by the burden of disease.

Wave Life Sciences is seeking a motivated and detail-oriented Cybersecurity Co-op to join our IT Security team for a six-month full-time assignment. In this role, you will gain hands-on experience across multiple areas of enterprise cybersecurity including threat monitoring, vulnerability management, identity and access initiatives, third-party risk assessments, AI/ML security, policy and compliance, and security awareness programs. This is an opportunity to work closely with security engineers and IT leaders, develop technical and analytical skills, and directly contribute to the protection of Wave's systems, data, and people.

RESPONSIBILITIES

Assist in Threat Monitoring, Response, and Security Tools Integration

• Support the Security Operations Center (SOC) by monitoring alerts from CrowdStrike and other security platforms, investigating suspicious activity, and escalating incidents following defined playbooks.
• Learn how to perform initial triage and enrichment of security events, document findings, and contribute to root-cause analyses.
• Identify integration and ingestion points for security tools, focusing on improving telemetry and automation within the CrowdStrike platform and related systems.

Vulnerability Management

• Assist in scheduling, running, and reviewing vulnerability scans across endpoints, servers, cloud environments, and network infrastructure.
• Track remediation efforts in collaboration with IT operations teams, ensuring patches and fixes are applied in a timely manner.
• Help maintain reporting dashboards to communicate remediation progress, trends, and compliance against defined SLAs.

Support Zero Trust and Identity Initiatives

• Participate in projects to advance Wave's Zero Trust strategy, including implementation of passwordless authentication methods and biometric access controls.
• Assist in reviewing role-based access control (RBAC) configurations to ensure least-privilege principles are consistently applied.
• Contribute to documentation and testing for new identity governance initiatives, including access recertification and MFA expansion.

Third-Party Risk Assessment

• Support the evaluation of IT vendors and managed service providers (MSPs) by gathering documentation, reviewing security questionnaires, and scoring vendor cybersecurity posture.
• Help maintain third-party risk registers, coordinate remediation plans with vendor contacts, and track progress against action items.
• Learn how to leverage tools such as BlackKite to expand third-party risk insights and reporting.

AI and ML Risk Support

• Contribute to cyber-AI risk assessments, focusing on the security and governance of open-source machine learning tools and large language model (LLM) integrations.
• Assist in documenting risks related to data privacy, model security, and supply-chain vulnerabilities.
• Support the development of mitigation strategies and tracking of open AI-related risks.

Policy and Compliance Support

• Assist in reviewing, updating, and publishing cybersecurity policies and procedures to ensure alignment with evolving best practices and regulatory requirements.
• Help manage the Written Information Security Program (WISP) and related documentation.
• Support mock assessments and evidence collection for frameworks such as ISO 27001 and NIST CSF to prepare for external audits.

Security Awareness and Training

• Assist in designing, executing, and analyzing phishing simulations and security awareness campaigns.
• Help deliver cybersecurity training sessions, gather feedback, and identify opportunities for improvement.
• Contribute to the development of shorter, focused training modules to increase employee engagement and knowledge retention.

QUALIFICATIONS

• Enrolled in a Computer Science or a related field bachelor's degree program at an accredited college/university.
• A GPA of 3.0 or higher is preferred.
• Strong Windows OS background.
• Strong written and verbal communication skills.
• Must be well-organized and have the ability to work in a team environment.
• Ability to manage responsibilities in a fast-paced environment.
• Able to take direction needed to resolve incidents quickly and effectively.
• Able to complete routine tasks independently over time. This includes gaining the functional, technical, and problem-solving skills needed to complete assignments.

Pay Range Disclosure Statement

$24—$30 USD

The range provided is based on what we believe is a reasonable estimate for the annual base salary pay range for this position at the time of posting. Actual annual base salary will vary based on several factors including, but not limited to, relevant skills, experience, qualifications, position criticality, and internal equity.  This position is eligible for a discretionary annual bonus and discretionary stock-based long-term incentives.  In addition to compensation, Wave offers a comprehensive and competitive range of benefits designed to support our employees' and their families physical and financial health and overall well-being. These include, but are not limited to, company-sponsored medical, dental, vision, life, long and short-term disability insurances, generous paid time off (including a week-long company shutdown in the Summer and the Winter), 401K participation with matching contributions, and Employee Stock Purchase Program. Wave Life Sciences provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Wave Life Sciences complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Wave Life Sciences expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Wave Life Sciences' employees to perform their job duties may result in discipline up to and including discharge.

We value our relationships with professional recruitment firms. To protect the interests of all parties, and given the large volume of inquiries received from third-party placement agencies, we are not able to respond to all agency inquiries. We do not accept unsolicited resumes from any source other than directly from candidates for current or future positions. Submission of unsolicited resumes in advance of a signed agreement between our company and a placement agency does not create an implied obligation and, if an unsolicited candidate represented by a placement agency is hired, we are not obligated to pay a fee. Only approved recruitment firms will be allowed to provide services to Wave Life Sciences, USA.

Data Privacy and Your Information

By submitting your information in applying for a position at Wave (or lawfully on behalf of a candidate as an approved recruiter), you represent that the information you submit (including your name, phone number, email address, address, and resume/CV/work history) is true and accurate, you have the right to share it, and that no part of the Information violates or infringes the rights of any third parties. If you submit information lawfully on behalf of another applicant as an approved recruiter, you confirm that you have the right to so submit. You grant Wave permission to use your information to contact you in connection with this or another position, for interviews, scheduling purposes, travel arrangements, or follow up after a decision on the role has been made.

Wave Life Sciences is committed to respecting your privacy. We do not sell or rent personal information to third parties for marketing purposes. Any Personal Information you share with us will be used for business purposes, such as communication with you, and handled in accordance with Wave's Privacy Policy, Notice, Statements, and Additional Information.  Wave collects, evaluates and retains candidate data for the legitimate interest of selecting a candidate for employment or contract purposes. Such data will be kept for no longer than necessary to carry out those purposes, unless you consent for your information to be retained up to an additional three (3) years for consideration for future opportunities at Wave.  Any requests related to your Personal Information may be electronically submitted to Wave's Data Protection Officer at https://wavelifesciences.com/privacy/.

If you choose to share your demographic background (such as race, gender or sex, national origin, age, disability or veterinary status) by completing the optional survey, your responses will be combined with the answers from other applicants in an aggregated and anonymized form which may be used for equal employment opportunity reporting, diversity and inclusion analysis, and to help us evaluate the effectiveness of our recruiting practices. The information you share will not be used for hiring decisions or provided to hiring managers or interviewers.