Cyber Security Operational, Technology & Engineer Fellow (Fall)

Summary

Metropolitan Transportation Authority is responsible for safeguarding the agency’s information systems and operational technology assets. The Cyber Security Operational, Technology & Engineer Fellow will assist in enhancing cybersecurity incident response readiness by conducting asset discovery and validating monitoring coverage gaps.

Responsibilities

• Review cybersecurity incident response documentation and identify systems and playbooks in scope
• Access and evaluate SIEM, IDS, and existing asset inventories
• Build and maintain an asset coverage matrix for visibility assessment
• Identify missing log sources, blind spots, and undocumented assets
• Validate SIEM and IDS detections for key asset categories
• Categorize identified gaps based on risk, visibility, and detection coverage
• Recommend prioritized remediation steps, including 'quick wins' for monitoring improvements
• Assist in creating new SIEM dashboards or detection views to improve operational visibility

Skills

• Proficiency in Microsoft Office Suite is a must
• The candidate should possess organizational, analytical and communication skills
• The candidate should be able to work well under pressure and prioritize tasks effectively
• The candidate should have a keen eye for detail and be able to work independently while being an active team player
• Knowledge of cybersecurity fundamentals, including logging, monitoring, SIEM, and incident response
• Familiarity with networking concepts, asset inventories, and basic security tools
• Experience with tools like Splunk and OT Network based IDS tools
• Matriculated in an undergraduate program in good standing with at least 2.5 GPA
• All applicants must be authorized to work in the United States at the time of application
• Students' transcript must be submitted
• Major(s) Preferred: Cybersecurity, Computer Science, IT, or related field

Qualifications

Must Haves

• Proficiency in Microsoft Office Suite is a must
• The candidate should possess organizational, analytical and communication skills
• The candidate should be able to work well under pressure and prioritize tasks effectively
• The candidate should have a keen eye for detail and be able to work independently while being an active team player
• Knowledge of cybersecurity fundamentals, including logging, monitoring, SIEM, and incident response
• Familiarity with networking concepts, asset inventories, and basic security tools
• Experience with tools like Splunk and OT Network based IDS tools
• Matriculated in an undergraduate program in good standing with at least 2.5 GPA
• All applicants must be authorized to work in the United States at the time of application
• Students' transcript must be submitted

Nice to Haves

• Major(s) Preferred: Cybersecurity, Computer Science, IT, or related field

Benefits

• All internship positions are onsite and require regular, in-person attendance at the designated work location.