Cybersecurity Internships
Cybersecurity internships give university students, recent graduates, and early-career switchers hands-on project experience working alongside working engineers, and, at many employers, a path toward a full-time offer. Openings across Retail are live now, with Tevora, Booz Allen Hamilton, and Leidos among the employers posting roles now.
Find Cybersecurity InternshipsOverview
Showing 5 of 104+ Cybersecurity Internships
What is the Cybersecurity Consultant Development Program?
Security Practice Area: Systems and Organizations Controls (SOC)
Perform comprehensive System and Organization Controls (SOC) assessments against service provider organizations across a multitude of industries, providing assurance of reliability and protection of all forms of sensitive data.
Support in the remediation of security control deficiencies through the development of policies and providing business process re-engineering recommendations to ensure compliance with SOC.
Provide Augmented Staff services, directly working within client organizations as a supporting team member to aid in the maintenance of security and compliance programs.
What’s the Role?
The Developing Consultant (DC) is an up-and-coming part of the client-facing consulting team. DCs are responsible for helping in conducting project delivery activities based on their selected Tevora Information Security practice areas, including Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually develop their skills through personal development and Information Security industry participation.
Key Responsibilities:
Develop technical and business skills required to perform billable work on projects as quickly as possible
Learn about industry-standard certifications and their benefits
Learn about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001
Observe implementations of Enterprise Security Solutions
Observe and help with internal and external penetration testing and social engineering projects
Plan technical execution plans to meet business requirements
Gather requirements to complete execution plans
Execute on previously designed plans
Document execution procedures and provide professional insights into the technologies involved
Assist Consultants with client engagements
Necessary skills and qualifications:
Every DC at Tevora is a technologist at heart but understands the critical intersection between business and technology. Foundationally, the ideal candidate will have basic familiarity with:
Networking concepts like firewalls, routers, switches, and DNS
Computer troubleshooting and server systems administration
Business planning and accounting
Any knowledge of compliance frameworks is a plus
Abilities:
Multi-tasking and time management skills
Dynamic, enthusiastic, and excellent interpersonal skills
Excellent writing both expository and technical documentation
Intermediate working knowledge of Excel and Word
Self-starter who likes to tinker and learn on their own
Education and Experience:
Bachelor's Degree from an accredited 4-year university (or Military equivalent) or currently enrolled at an accredited 4-year university (or Military equivalent)
IT, Cybersecurity, and Information Security certifications a plus
Additional requirements:
Eligibility to work in the United States.
Required to work onsite at our Fairfax, VA, or Irvine, CA, location.
We've got you covered!
Paid Sick Time Off
Vibrant work culture
Career advancement opportunities
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
What is the Cybersecurity Consultant Development Program?
Security Practice Area: Systems and Organizations Controls (SOC)
Perform comprehensive System and Organization Controls (SOC) assessments against service provider organizations across a multitude of industries, providing assurance of reliability and protection of all forms of sensitive data.
Support in the remediation of security control deficiencies through the development of policies and providing business process re-engineering recommendations to ensure compliance with SOC.
Provide Augmented Staff services, directly working within client organizations as a supporting team member to aid in the maintenance of security and compliance programs.
What’s the Role?
The Developing Consultant (DC) is an up-and-coming part of the client-facing consulting team. DCs are responsible for helping in conducting project delivery activities based on their selected Tevora Information Security practice areas, including Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually develop their skills through personal development and Information Security industry participation.
Key Responsibilities:
Develop technical and business skills required to perform billable work on projects as quickly as possible
Learn about industry-standard certifications and their benefits
Learn about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001
Observe implementations of Enterprise Security Solutions
Observe and help with internal and external penetration testing and social engineering projects
Plan technical execution plans to meet business requirements
Gather requirements to complete execution plans
Execute on previously designed plans
Document execution procedures and provide professional insights into the technologies involved
Assist Consultants with client engagements
Necessary skills and qualifications:
Every DC at Tevora is a technologist at heart but understands the critical intersection between business and technology. Foundationally, the ideal candidate will have basic familiarity with:
Networking concepts like firewalls, routers, switches, and DNS
Computer troubleshooting and server systems administration
Business planning and accounting
Any knowledge of compliance frameworks is a plus
Abilities:
Multi-tasking and time management skills
Dynamic, enthusiastic, and excellent interpersonal skills
Excellent writing both expository and technical documentation
Intermediate working knowledge of Excel and Word
Self-starter who likes to tinker and learn on their own
Education and Experience:
Bachelor's Degree from an accredited 4-year university (or Military equivalent) or currently enrolled at an accredited 4-year university (or Military equivalent)
IT, Cybersecurity, and Information Security certifications a plus
Additional requirements:
Eligibility to work in the United States.
Required to work onsite at our Fairfax, VA, or Irvine, CA, location.
We've got you covered!
Paid Sick Time Off
Vibrant work culture
Career advancement opportunities
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Cybersecurity Internship Market
Who's Hiring
Top Industries Hiring
- Retail
Tips for Your Cybersecurity Internship Search
Apply earlier than the role posting suggests
Large employers in defense contracting, financial services, and technology recruit summer cybersecurity interns the preceding fall, sometimes closing applications before December. Smaller companies and co-ops post much closer to start dates. Checking consistently across the full academic year means you don't miss either window.
Build a portfolio before you need it
At the intern stage, projects carry more weight than work history. Document two or three complete cybersecurity projects, capture-the-flag write-ups, home-lab configurations, or vulnerability research, naming the tools used and hosting the work somewhere a recruiter can read it without asking.
Work campus connections alongside direct applications
Career fairs surface structured programs tied specifically to your university, and professors or career center staff often know which employers recruit from your school before roles go public. Applying directly to companies running smaller cohorts alongside campus activity reaches employers who don't attend fairs.
Practice your technical screen out loud
Cybersecurity intern interviews typically include a technical screen covering networking fundamentals, threat concepts, or security tooling, some roles add a hands-on component or a scenario walkthrough. Practice explaining your reasoning aloud, not just reaching the right answer, because interviewers weigh how you think as much as the conclusion.
Target structured security internship programs early
Larger employers in defense, government, and enterprise technology run cohort or rotational security programs built to train candidates new to the field, the DoD Cyber Scholarship Program is one well-known example. These programs recruit early, fill fast, and often have fixed application windows, so identify the ones that fit and apply in the first wave.
Set your work-type filter before you start
On-site roles are 48% of the cybersecurity internships listed here. Decide what you can actually commit to before you begin reviewing listings, then filter by location and work type on Migrate Mate so you're only spending time on roles you can take.
Cybersecurity Internships: Frequently Asked Questions
How do I get a cybersecurity internship?
Lead with coursework, personal projects, and a portfolio rather than work history, hiring teams expect limited experience at the intern level. A documented lab or capture-the-flag write-up gives recruiters something concrete to assess. Combine direct applications with campus career fairs, where cybersecurity recruiters often move faster for students they meet in person.
Can a cybersecurity internship turn into a full-time job?
Many employers extend return offers to strong interns, but conversion is never guaranteed. What actually drives it is performance on real security work, available headcount on the team, and how early you signal interest in returning. Treat the internship as an extended audition and ask about return-offer timelines before your final weeks.
When should I apply for cybersecurity internships?
Earlier than most candidates expect. Large employers in defense, finance, and technology recruit summer interns the preceding fall, with deadlines sometimes arriving before December. Smaller companies and co-op programs post closer to the actual start date, so openings appear year-round and checking regularly pays off.
Are cybersecurity internships paid?
Most professional cybersecurity internships in the United States are paid. Compensation varies by company size, industry, and location. Where employers disclose pay, the listing shows it, filter by disclosed compensation if that information matters to your decision.
What should a cybersecurity internship resume include?
Lead with projects, not work history. Include two or three complete, documented projects naming the tools used and linking to the work, a GitHub repository with write-ups, a capture-the-flag portfolio, or a home-lab walkthrough gives recruiters something real to evaluate. Add relevant coursework, certifications in progress, and keep the whole document to one page.
Are there remote cybersecurity internships?
Yes. Remote and hybrid roles make up 52% of the cybersecurity internship listings here, with the rest on-site. Remote security cohorts fill quickly because they attract candidates nationally, so apply early and use the work-type filter to see them without sorting through roles you can't take.
What is a DoD Cyber Scholarship Program (CySP) internship?
The CySP is a structured, federally funded program placing cybersecurity students at Department of Defense agencies for summer internships, often with scholarship support attached. It targets students new to federal security work, recruits early in the academic year, and is competitive, so identify the application window and apply in the first wave.
Can international students get cybersecurity internships?
Yes. F-1 students can intern through CPT while enrolled or through OPT work authorization after finishing a degree, and the employer does not have to file anything for either, so many companies are open to international interns. Confirm your eligibility and timing with your university's international student office before accepting an offer.
See All 104+ Cybersecurity Internship Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cybersecurity Internships