--- title: 'Security Operations Intern at Sky Mavis' canonical: 'https://feeny.ai/job/security-operations-intern-sky-mavis-vietnam-kfek14tx9mhr' type: 'job' last_seen: '2026-09-06' --- # Security Operations Intern at Sky Mavis - **Company:** Sky Mavis - **Location:** Vietnam - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-08-18 - **Last confirmed live:** 2026-09-06 - **Apply:** https://jobs.ashbyhq.com/skymavis/077388d7-385f-46e2-b7f0-e870deecd707 ## Job description ## ABOUT SKY MAVIS Sky Mavis is building the future of gaming. We’re the creators of Axie Infinity, the most successful Web3 game ever, and Ronin, a purpose-built blockchain that ranked as the 4th most-used chain in 2024, behind Ethereum, Bitcoin, and Solana. We’ve processed over $4.3 billion in on-chain volume and are backed by more than $170 million from top-tier investors, including a16z, Accel, Libertus Capital, and Paradigm. Our team moves fast, builds with intention, and believes in a world where players truly own what they earn. If you’re excited by open economies, massive scale, and shaping new digital frontiers, join us. ## ABOUT THE ROLE We are replacing our commercial third-party security awareness training vendor with an in-house platform. This internship sits at the intersection of security operations and software delivery. You will own the security awareness training program end-to-end: designing the training content and quiz bank, building and deploying the platform that delivers it (the architecture and specifications are already fully documented, and you'll work with AI-assisted development tooling under senior guidance), and then running it as an operational security program — enrollments, completion tracking, and audit-ready reporting. You'll leave with something few interns get: hands-on experience running a real security awareness program for a whole company, plus the platform you shipped to production to run it on. ## WHAT YOU’LL DO Security awareness program (primary focus) - Design and author the security awareness training curriculum: modules and quiz banks covering phishing and social engineering, password and MFA hygiene, data handling and classification, secure remote work, and Web3-specific threats (wallet security, seed phrase protection, approval scams, fake dApps). - Map each training module to the compliance requirements it satisfies (SOC 2 CC1/CC2, ISO 27001 A.6.3 awareness controls) so auditors can trace evidence to controls. - Operate the training program day-to-day: enroll employees, configure module deadlines and renewal cycles, monitor completion rates, and chase stragglers with the People team. - Produce audit-ready reporting: completion evidence exports, on-chain verification links for auditors, and periodic metrics for the security team (completion %, average scores, weakest topics). - Use quiz analytics to find knowledge gaps and iterate on content — treat awareness as a measurable security control, not a checkbox. - Document program runbooks (onboarding a new hire, adding a module, annual renewal campaign, audit evidence collection) so the program survives beyond the internship. Platform delivery (the tool you'll run the program on) - Implement the platform from the existing specification under senior review: Solidity contracts (completion tracker + soulbound certificate NFT), Express/TypeScript/PostgreSQL backend with server-side quiz scoring and signed attestations, and the React frontend (module player, quiz flow, dashboards, admin analytics, public certificate verification). - Test and harden it: contract tests (100% must pass), backend integration tests, and the project's mandatory security-audit and business-logic checks before every PR — zero Critical/High findings before deploy. - Deploy, then support. ## WHAT WE LOOK FOR - Final-year student or recent graduate in Information Security, Computer Science, or a related field (or equivalent practical experience). - Solid security fundamentals: common attack vectors (phishing, social engineering, credential theft, malware delivery), basic OWASP Top 10 awareness, and why the human layer is a primary attack surface. - Genuine interest in security awareness and security operations: you can explain what makes training effective versus checkbox compliance, and you care about measuring behavior change, not just completions. - Familiarity with a compliance or control framework (SOC 2, ISO 27001, NIST CSF) - Working programming ability in TypeScript/JavaScript (Node.js, REST APIs, basic SQL, basic React) — enough to implement from a detailed specification with senior review and AI-assisted tooling. This is a build-and-operate role, not a research role. - Strong written communication: you will author training content and audit documentation that non-technical employees and external auditors will read. - Interest in Web3 security — wallet threats, on-chain verification — with motivation to learn Solidity basics quickly (prior experience not required). - Understanding of Git workflows (branching, pull requests, code review). ## NICE TO HAVE - Security research/hand-on or Blue CTF experience. - Prior exposure to an awareness training or phishing-simulation platform (e.g., KnowBe4, GoPhish) as an admin or content author. - Experience with SOC/security operations tooling, or contributing to audit evidence collection. - Exposure to Solidity, Hardhat, ethers.js, or any EVM chain (Ronin is a plus). - Experience creating instructional content (slides, videos, quizzes) or running internal campaigns. ## About Sky Mavis ## Company Overview - **One-liner**: Sky Mavis builds the virtual worlds of the future (notably Axie Infinity) and the Ronin blockchain infrastructure that makes them possible, pioneering player-owned economies in gaming. - **Entity Type**: Private (Series C, $311.9M total funding) - **Headquarters**: Central Business District, Singapore (with major offices in Ho Chi Minh City, Vietnam, and smaller hubs in the US, UK, and beyond) - **Founded**: 2019 - **Founders**: The founding team includes Aleksander Leonard Larsen (Co-Founder, former Chairman & COO), Jeffrey Zirlin (Co-Founder & Growth Lead), and others (the full founder set is not publicly named on the main site, but these two are widely recognized). ## Core Business - Primary industry/industries: Blockchain Gaming / Web3 Infrastructure - Target customers: B2B (game developers building on Ronin) and B2C (players of Axie Infinity and other Ronin-based games) - Mission or purpose statement: "Economic freedom, for everyone" — introducing the world to crypto through nostalgic games and practical applications, and building a future where blockchain powers everyday life. ## Products & Services For each major offering: - **[Axie Infinity]**: A pioneering blockchain-based virtual world and game where players collect, breed, battle, and trade cute creatures called Axies. It became the #1 blockchain game by all-time NFT volume, introducing millions to crypto through gameplay. - **[Ronin]**: An EVM-compatible blockchain specifically crafted for game developers building player-owned economies. It is the #1 gaming-centric blockchain by all-time NFT volume. It provides the infrastructure for fast, low-cost transactions. - **[Mavis Ecosystem / Mavis Products]**: A suite of tools and infrastructure products designed to give game developers everything they need to build and scale blockchain-infused games, including wallets, marketplaces, and SDKs. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed. However, the company has raised substantial funding (see below). - **Key Metric**: Annual Revenue of **$1.3B** (per LinkedIn company data) | Total Funding: **$311.9M**. - **Notable Investors/Partners**: Key investors include **Binance** (led Series C), **Animoca Brands** (led Seed round), and a broad syndicate of 21 investors in the Series B. The company is deeply integrated with the broader Web3 and gaming ecosystem. - **Growth Signals**: Despite a headcount reduction (-26.9% YoY to ~108 employees), the company is actively hiring (6 open positions as of mid-2025, with job postings up 500% year-over-year). They have successfully launched and scaled the Ronin blockchain, which hosts a growing ecosystem of games. The company has weathered major market downturns (the "crypto winter") and emerged battle-hardened, with a focus on long-term building. ## Competitive Advantages - **Proven Track Record**: Sky Mavis is the team behind Axie Infinity, the single most successful blockchain game to date, which proved the viability of player-owned economies at scale. - **Full-Stack Ownership**: They control both the top game (Axie Infinity) and the underlying infrastructure (Ronin), creating a unique, integrated flywheel. This allows for rapid iteration and deep integration that competitors cannot easily replicate. - **Battle-Hardened Team**: Having survived the collapse of FTX, a major Ronin bridge hack, and the crypto bear market, the team is described as "anti-fragile" and deeply experienced in navigating extreme volatility and crisis. - **First-Mover Advantage in Gaming L2s**: Ronin is the leading gaming-focused blockchain, giving them a significant head start in attracting developers and users compared to newer entrants. ## Strategic Focus - **Growing the Mavis Ecosystem**: The primary focus is on expanding the Ronin ecosystem beyond just Axie Infinity. They are actively courting third-party game developers to build on Ronin, aiming to become the default blockchain for Web3 gaming. - **Infrastructure as a Product**: They are productizing the tools and infrastructure they built for Axie Infinity (the "Mavis Ecosystem") to lower the barrier to entry for other game studios. - **Delivering Real Utility**: Moving beyond pure speculation, Sky Mavis is focused on building practical, fun applications that demonstrate the value of blockchain ownership to a mainstream audience. ## Why Work Here - **Impact and Ownership**: The company culture emphasizes "Ownership" — employees are given real stake in the products they build and are expected to take ownership of their work. You will work on "things the world has never seen before" and conduct experiments blending gaming, economics, and political science. - **Remote-First, Global Team**: While headquartered in Singapore, the team is distributed across 11+ countries (with a large hub in Vietnam). They offer "work arrangements" to support flexibility. - **Benefits**: The company offers a comprehensive benefits package including: competitive salary, top-tier healthcare (medical, dental, vision), mental health counseling/workshops, guild sponsorships for team bonding, personal vacation sponsorship, learning & development sponsorship, and a Macbook for every new joiner. - **Culture**: Described as "fast-paced, active, and immersive," with a focus on "fast iteration, calculated experimentation." The environment is for "explorers" and "paradigm builders" who are comfortable with ambiguity and a high degree of autonomy. The employer rating on LinkedIn is 3.6/5.0, with compensation rated highest (3.8) and culture (2.7) and career (2.9) as areas for improvement. - **The Mission**: The company's stated mission is "Economic freedom, for everyone," which provides a strong sense of purpose beyond just building a product. ## Sources 1. [skymavis.com](https://skymavis.com/) 2. [skymavis.com/careers](https://skymavis.com/careers) 3. [skymavis.com/team](https://skymavis.com/team) 4. [blog.skymavis.com](https://blog.skymavis.com/p/what-will-you-get-at-skymavis) 5. [linkedin.com/company/skymavis](https://sg.linkedin.com/company/skymavis) ## Other roles at Sky Mavis - [Legal Counsel / Paralegal](https://feeny.ai/job/legal-counsel-paralegal-sky-mavis-vietnam-y39a36777xf2) — Vietnam - [Freelance Travel Spend & Market Explorer](https://feeny.ai/job/freelance-travel-spend-market-explorer-sky-mavis-vietnam-dz24fnnh9pdq) — Vietnam - [Cloud Security Engineer](https://feeny.ai/job/cloud-security-engineer-sky-mavis-vietnam-qrq31083zyx3) — Vietnam - [Web3 Security Engineer](https://feeny.ai/job/web3-security-engineer-sky-mavis-vietnam-ekn7qg7zz9sj) — Vietnam