Cybersecurity Internship Summer 2027 - Systems and Organizations Controls (SOC)

Description

The Cybersecurity Consultant Development Program is a paid, hands-on internship that builds the technical and professional skills needed to move into a full-time Information Security Associate role.

The summer 2027 cohort is expected to run from May 31 to August 6.

The program is based in Irvine, CA and Fairfax, VA (DC area), and it is run by the company, a consulting firm.

The Systems and Organizations Controls (SOC) practice area focuses on SOC assessments for service providers in many industries, security and compliance program upkeep, and remediation of control gaps.

Developing Consultants work on the client-facing consulting team, supporting project delivery in one of the firm's practice areas: Enterprise Risk, Compliance, Solutions Implementation, or Threat Research. You will keep building your skills through self-study and taking part in the information security community.

Responsibilities

• Assess service providers against SOC criteria across a range of industries, checking that sensitive data is reliable and protected.
• Help fix security control gaps by drafting policies and suggesting changes to business processes that support SOC compliance.
• Work inside client organizations as a supporting team member on security and compliance programs.
• Build the technical and business skills needed to do billable project work as early as possible.
• Learn industry certifications and what they are worth.
• Study national and international standards and frameworks such as PCI-DSS, HIPAA, and ISO 27001.
• Watch enterprise security solutions being implemented.
• Support internal and external penetration tests and social engineering engagements.
• Draft technical execution plans that meet business needs, and gather the requirements those plans depend on.
• Carry out plans that have already been designed.
• Write up execution procedures and explain the technologies involved.
• Assist consultants on client engagements.

Requirements

• Basic familiarity with networking concepts such as firewalls, routers, switches, and DNS.
• Basic computer troubleshooting and server administration skills.
• Basic understanding of business planning and accounting.
• Knowledge of compliance frameworks is a plus.
• Strong multitasking and time management skills.
• Energetic, friendly, and good at working with people.
• Strong writing skills for both explanatory and technical documents.
• Intermediate working knowledge of Excel and Word.
• Someone who enjoys experimenting and learning independently.
• A bachelor's degree from an accredited four-year university or military equivalent, or current enrollment in one.
• IT, cybersecurity, or information security certifications are a plus.

Conditions

You must be eligible to work in the United States.

The role is fully onsite at the Fairfax, VA or Irvine, CA location.

Equal opportunity statement: applicants are considered without regard to protected characteristics.

Benefits

• Paid sick time off.
• A supportive, collaborative work culture.
• Opportunities for career advancement.
• Successful completion of the program may lead to a full-time entry-level Information Security Associate offer.