Cybersecurity Internship Winter 2027 - Healthcare

Description

This is a paid training internship in the Cybersecurity Consultant Development Program for the Winter 2027 cohort, expected to run January 25 to April 2.

The program prepares participants for a full-time Information Security Associate role. Interns join the client-facing consulting team as Developing Consultants and help deliver projects across practice areas such as Enterprise Risk, Compliance, Solutions Implementation, and Threat Research.

The security practice area is Healthcare. The work covers hospitals, clinics, insurance companies, medical device makers, and other healthcare technology service organizations, with a focus on protecting Protected Healthcare Information (PHI).

Assessments check the security posture and controls of healthcare organizations against HIPAA and HITRUST. Advisory work helps organizations meet those requirements when strategic initiatives, projects, or infrastructure architecture change.

Interns are expected to build their skills through self-directed development and participation in the information security industry.

The company is a close-knit group of cybersecurity, technology, and compliance professionals who enjoy solving problems and learning together.

Responsibilities

• Build the technical and business skills needed to do billable project work as early as possible.
• Learn industry-standard certifications and what they offer.
• Learn national and international standards and frameworks such as PCI-DSS, HIPAA, and ISO 27001.
• Watch enterprise security solution rollouts as they happen.
• Observe and assist with internal and external penetration tests and social engineering projects.
• Draft technical execution plans that meet business requirements.
• Collect the requirements needed to complete those plans.
• Carry out plans that others have designed.
• Write up execution procedures and explain the technologies involved from a professional standpoint.
• Support consultants on client engagements.

Requirements

• Technical background at a working level, with a business mindset: you understand how technology and business needs connect.
• Basic familiarity with networking concepts such as firewalls, routers, switches, and DNS.
• Basic familiarity with computer troubleshooting and server system administration.
• Basic familiarity with business planning and accounting.
• Knowledge of compliance frameworks is a plus.
• Strong multitasking and time management.
• Dynamic, enthusiastic, and strong interpersonal skills.
• Strong writing for both explanatory and technical documents.
• Intermediate working knowledge of Excel and Word.
• Self-motivated, with a habit of experimenting and learning on your own.
• Bachelor's degree from an accredited 4-year university (or military equivalent), or current enrollment at one.
• IT, cybersecurity, or information security certifications are a plus.

Conditions

You must be eligible to work in the United States.

The role is onsite at the Fairfax, VA, or Irvine, CA, location.

The company is an equal opportunity employer.

Benefits

• Paid sick time off.
• A lively work culture.
• Career advancement opportunities.
• Successful completion may lead to a full-time entry-level Information Security Associate offer.