2027 Spring Non-legal Intern - IT Section: Cybersecurity

Position Information

The Cybersecurity Intern supports daily cybersecurity operations under the guidance of the Cybersecurity Administrator and broader cybersecurity team. This internship is designed to introduce students or early-career professionals to practical cybersecurity concepts, tools, and workflows used in an enterprise security program. The intern will assist with monitoring security alerts, documenting incidents, performing basic investigations, supporting vulnerability management tasks, helping maintain security documentation, and participating in security awareness initiatives. This role provides hands-on experience with industry frameworks including NIST CSF, NIST SP 800-53, and CJIS Security Policy while cultivating foundational skills required for a future career as a cybersecurity analyst.

Examples Of Duties

• Assist with initial triage of security alerts, including classifying events, gathering relevant information, and escalating issues to senior cybersecurity personnel.
• Support incident response activities by documenting actions, timelines, and evidence under supervision.
• Help maintain and update incident response playbooks, checklists, and knowledge base articles.
• Participate in Security Operations Center (SOC) monitoring activities and learn concepts related to detection, analysis, and response.
• Assist the Vulnerability Management Program by helping track asset inventories, reviewing scan results, verifying remediation, and preparing summary reports.
• Contribute to cyber risk management activities by helping update the risk register, gathering supporting documentation, and reviewing corrective actions.
• Support the Security Awareness & Training Program by preparing materials, helping analyze phishing campaign outcomes, and assisting in communication efforts.
• Help review, organize, and maintain cybersecurity policies, standards, and procedures, ensuring documentation remains current.
• Gain exposure to key components of the security technology stack such as SIEM/SOAR, EDR, email security, identity security, and data protection tools.
• Participate in introductory threat hunting exercises, learning how hypotheses are formed and how they tie to the MITRE ATT&CK framework.
• Contribute to cross-department collaboration by attending meetings with Infrastructure, Technology Experience, Litigation Support, and Software Engineering units.
• Perform general administrative or analytical duties that support the cybersecurity team’s daily operations.
• Perform related duties as assigned.

Minimum Experience and Training

• Must be enrolled and in good standing with an accredited college or university;

• Must have completed at least 60 course credits towards a bachelor’s degree or equivalent;

• Currently pursuing or recently completed a degree or certificate in Cybersecurity, Information Technology, Computer Science, or a related field.• Prior coursework or self-directed learning in cybersecurity, networking, or information systems is preferred.

Preferred Knowledge, Skills, and Abilities

• Foundational understanding of cybersecurity concepts such as threats, vulnerabilities, incident response, and security controls.
• Interest in learning industry frameworks including NIST CSF, NIST SP 800-53, and CJIS Security Policy.
• Basic familiarity with security tools or concepts such as SIEM, EDR, or vulnerability scanners (coursework or lab-based experience acceptable).
• Strong analytical and problem-solving skills with exceptional attention to detail.
• Ability to follow established procedures and ask questions when clarification is needed.
• Ability to communicate clearly and professionally in writing and verbally.
• Ability to work independently and manage time effectively within a part-time schedule.
• Demonstrated desire to grow in the cybersecurity field and willingness to learn from senior team members.

Agency Information

Employer

Pennsylvania Office of Attorney General

Address

Strawberry Square-14th FloorHarrisburg, Pennsylvania, 17120

Phone

717-787-5175

Website

http://www.attorneygeneral.gov