Threat Analyst, Summer Trainee

For over 35 years, F-Secure has led the cybersecurity industry with our 200+ service provider partners. As the home of scam protection, we're reimagining how we protect people from modern threats through cutting-edge scam detection and solutions that are setting the industry standard. We bring together the sharpest minds of cyber security with a shared purpose: to protect people from modern threats. Here, you’ll have a real impact, making every digital moment more secure for everyone. You’ll thrive and grow in our Fellowship culture, where we dream big, trust, and challenge each other to deliver results and move with speed. You’ll be welcomed into a diverse, global team with an informal and collaborative culture where your voice truly matters.

Join us in securing the digital world together – where your work will make a lasting impact.

Join F-Secure's Scam Research and Defence Lab for a summer of real threat intelligence work protecting millions of users. As a Threat Analyst Summer Trainee, you'll work on actual scam detection systems—analyzing URLs, improving threat coverage across key regions, and strengthening our product's ability to identify and block malicious content. This is not an observation traineeship: you will enhance detection rules that go live, analyze real threat data, and contribute to systems that protect users in Finland, Japan, the United States, and France.

At F-Secure, we are inventing with AI, not just using it. You will see how we build AI into our threat detection systems to identify scams faster and protect users better, always asking "what can we create with this?"

You'll learn from experienced security researchers in our global team of 10 researchers based in Helsinki and Kuala Lumpur. Our culture values continuous learning, giving people autonomy to make decisions, and working together to stay ahead of evolving scam tactics. We maintain quality in our threat intelligence while giving you space to experiment and learn from mistakes, because innovation comes from trying new approaches and learning from what doesn't work.

The role is based in Helsinki, Finland. Remote work is flexible, and the team typically meets at the office about once a week for co-working and team time. During onboarding and your first weeks, we strongly recommend working from the office to get the most out of mentoring and peer support.

The traineeship lasts 3-5 months, with start dates typically in April or at the end of May. Due to the fixed-term nature of this role, we do not sponsor relocation for the summer trainee position.

Your role

Support day-to-day threat intelligence operations by enhancing URL reputation and content coverage for key regions (FI, JP, US, FR). Your work directly improves our product's ability to detect and block scams in these markets, supporting F-Secure's mission of becoming the number one leader in scam protection.

Key Responsibilities

• Enhance URL reputation and content coverage for FI, JP, US & FR regions
• Identify and suggest improvements to detection rules for better accuracy and coverage
• Analyze scam trends and implement region-specific detection strategies
• Work with OpenSearch dashboard and internal tooling to analyze large volumes of threat data
  
  

You'll Learn

• Region-specific threat intelligence and how scam tactics differ across markets
• Data analysis at scale using advanced threat detection tools
• Detection rule optimization and threat research methodologies
• How to navigate uncertainties and work independently in open problem domains
  
  

Tech: Python, OpenSearch, internal tooling, SQL (advantage)

Who We're Looking For

We are seeking 3rd–5th year university students with a passion for technology and problem solving. We also welcome students from non-traditional study backgrounds such as coding bootcamps, Hive, and other alternative tech education programs. Previous experience from internships, personal projects, or open-source contributions is beneficial but not required—we value curiosity, learning ability, and technical potential.

Technical Background

• 3rd-5th year university student in Cybersecurity, Computer Science, or IT
• Comfortable coding in Python with some deployment experience
• SQL knowledge is an advantage
• Alternative tech education backgrounds (bootcamps, Hive) welcome
  
  

What Makes You Great

• Curious and proactive—you navigate unknowns without constant direction
• Collaborative with a growth-oriented approach to diverse teams
• Excellent communication in English for documenting findings and presenting insights
• Enthusiastic learner with a team-oriented attitude
• Detail-oriented with strong analytical thinking
  
  

What you will get from us?

• Welcome to the good side – the home of scam protection! Work with industry-leading experts defining the future of cybersecurity and scam protection
• Be an AI pioneer, not a follower. Access industry-leading tools like Claude and Claude Code, with full support to integrate AI into your daily work while others are still figuring out policies. We're not asking "if" but "how" AI transforms our work, positioning you at the forefront of the industry.
• Thrive in our Fellowship culture where we empower, trust, challenge, and support each other in doing our best work.
• Flexible work that works for you – hybrid and remote options with team-agreed ways of working.
• Inclusive environment with flat, approachable leadership in our diverse global community.
• Wellbeing support through personal coaching services and one hour per week for personal recharging.
• Continuous growth via F-Secure Academy, Leadership programs, AI training, mentoring, and dedicated Learning Week.
  
  

Our benefits include extensive health care, phone and gym benefit, remote working and many more things to keep our best asset – people - happy!

A security vetting will possibly be conducted for the selected candidate in accordance to our employment process.

,