Cyber Analyst Intern - Summer 2027

Role overview

Responsibilities

• Conduct information security risk assessments under the NIST Risk Management Framework for projects, infrastructure, and applications.
• Assess internal security controls, participate in the SDLC as a risk assessor and advisor, and monitor security and privacy developments.
• Serve as a security technical liaison to project and functional teams and support FISMA audit requirements.
• Maintain the Application Security Plan and manage completion of risk assessments.
• Create Plans of Action and Milestones; manage application vulnerability mitigation strategies and contingency plans.
• Analyze firewall rules and continuously monitor applications, databases, and systems.
• Manage asset inventory, compliance monitoring, file integrity monitoring, and log management.
• Provide monthly reporting and metrics; perform incident and vulnerability response.
• Conduct vulnerability and application scanning analysis and track mitigation.
• Communicate with the Security Operations Center and Marshall Incident Response Team.

Required qualifications

• Currently enrolled in and pursuing an undergraduate or graduate degree in Cyber Security or a related area.
• Understanding of information security roles; working knowledge of NIST RMF and NIST SP 800-53 IA Controls.
• Knowledge of risk assessments, system security planning, incident response, and mitigating controls.
• Knowledge of vulnerability assessment tools such as Nessus, HP WebInspect, HP Fortify, or Burp Suite.
• Broad technology background including distributed systems, enterprise applications, and application development, architecture, or SDLC.
• Able to work independently and collaboratively, build constructive working relationships, and communicate with technical and non-technical audiences.
• Legally authorized to work in the United States without employer sponsorship now or in the future.

Desired qualifications

• Desired experience includes firewall ruleset analysis, web application scanning, web or system vulnerability assessment, static code analysis, SAP access-management security, or security in agile environments.
• CompTIA Security+ certification is a plus.

Compensation

• The posting describes the internship as paid and lists a yearly pay range of USD 45,900–91,900.
• Final salary may depend on location, contract labor categories and rates, experience, skills, education, and certifications.

Schedule and travel

• The position is part time and on-call.
• No travel is required.