Cybersecurity Internships
Cybersecurity internships give university students, recent graduates, and early-career switchers hands-on project experience working alongside working engineers, and, at many employers, a path toward a full-time offer. Openings across {{top_industries_phrase}} are live now, with Tevora, IS4S, and Melaleuca among the employers posting roles now.
Find Cybersecurity InternshipsOverview
Showing 5 of 15+ Cybersecurity Internships
Cybersecurity & AI/Data Governance Intern
- 50294
- Remote, United States
- Full Time
POSITION SUMMARY:
We are seeking a Cybersecurity & AI/Data Governance Intern to bridge the gap between security compliance and engineering. In this role you will assist in the design, audit, and implement technical guardrails that protect our infrastructure and govern our data and AI systems.
This position is ideal for an engineer who understands full-stack architectures, infrastructure-as-code, and systems administration, and wants to apply those skills to modern security engineering, Identity Governance and Administration (IGA), and secure AI deployment.
By the conclusion of this internship, you will progress beyond basic compliance tasks and actively contribute to the development of solutions addressing enterprise security and AI needs. Through your work, you will gain practical experience in implementing automated identity lifecycle management, conducting security audits for both cloud and on-premises infrastructures, and establishing data governance policies that enable the secure expansion of AI initiatives.
Profile: Cybersecurity & AI / Data Governance Intern
Department: Information Security
Schedule: Full Time
ESSENTIAL DUTIES & RESPONSIBILITIES:
Identity Governance & Secure Architecture
Audit and refine RBAC permissions across all platforms.
Integrate and modernize Identity Providers using OIDC/SAML for secure access.
Develop secure, reusable infrastructure templates with Terraform, Ansible, or AWS CDK to meet compliance standards.
Systems Security & Infrastructure Integrity
Harden enterprise Linux and containerized environments.
Configure firewall, VLANs, and network protocols to segment development, production, and HPC environments.
Monitor logs and patch systems to address vulnerabilities.
AI & Data Governance Frameworks
Define data workflows and ensure privacy and retention in data pipelines (LDAP/ZFS).
Set security controls for Vision-Language Models and vector searches to prevent unauthorized data/model access.
Oversee GPU resources and enforce usage policies to support compliance.
Preferred Technical Experience
Languages: Python, TypeScript, Java/Kotlin, or C/C++.
Identity & Networking: Understanding of OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls.
Infrastructure & DevOps: Practical experience with Linux systems administration (RHEL preferred), virtualization/containers (Docker, Kubernetes, Proxmox), and CI/CD automation (GitHub Actions, Ansible, Terraform).
Database & Storage: Familiarity with caching layers (Redis/Valkey), structured/unstructured databases (SQL, MongoDB), and redundant storage file systems (ZFS).
Compensation Range:
$0.01- $0.00This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
Equal Opportunity Employer/Disabled/Veterans
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Cybersecurity & AI/Data Governance Intern
- 50294
- Remote, United States
- Full Time
POSITION SUMMARY:
We are seeking a Cybersecurity & AI/Data Governance Intern to bridge the gap between security compliance and engineering. In this role you will assist in the design, audit, and implement technical guardrails that protect our infrastructure and govern our data and AI systems.
This position is ideal for an engineer who understands full-stack architectures, infrastructure-as-code, and systems administration, and wants to apply those skills to modern security engineering, Identity Governance and Administration (IGA), and secure AI deployment.
By the conclusion of this internship, you will progress beyond basic compliance tasks and actively contribute to the development of solutions addressing enterprise security and AI needs. Through your work, you will gain practical experience in implementing automated identity lifecycle management, conducting security audits for both cloud and on-premises infrastructures, and establishing data governance policies that enable the secure expansion of AI initiatives.
Profile: Cybersecurity & AI / Data Governance Intern
Department: Information Security
Schedule: Full Time
ESSENTIAL DUTIES & RESPONSIBILITIES:
Identity Governance & Secure Architecture
Audit and refine RBAC permissions across all platforms.
Integrate and modernize Identity Providers using OIDC/SAML for secure access.
Develop secure, reusable infrastructure templates with Terraform, Ansible, or AWS CDK to meet compliance standards.
Systems Security & Infrastructure Integrity
Harden enterprise Linux and containerized environments.
Configure firewall, VLANs, and network protocols to segment development, production, and HPC environments.
Monitor logs and patch systems to address vulnerabilities.
AI & Data Governance Frameworks
Define data workflows and ensure privacy and retention in data pipelines (LDAP/ZFS).
Set security controls for Vision-Language Models and vector searches to prevent unauthorized data/model access.
Oversee GPU resources and enforce usage policies to support compliance.
Preferred Technical Experience
Languages: Python, TypeScript, Java/Kotlin, or C/C++.
Identity & Networking: Understanding of OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls.
Infrastructure & DevOps: Practical experience with Linux systems administration (RHEL preferred), virtualization/containers (Docker, Kubernetes, Proxmox), and CI/CD automation (GitHub Actions, Ansible, Terraform).
Database & Storage: Familiarity with caching layers (Redis/Valkey), structured/unstructured databases (SQL, MongoDB), and redundant storage file systems (ZFS).
Compensation Range:
$0.01- $0.00This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
Equal Opportunity Employer/Disabled/Veterans
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Cybersecurity Internship Market
Who's Hiring
Tips for Your Cybersecurity Internship Search
Apply earlier than the role posting suggests
Large employers in defense contracting, financial services, and technology recruit summer cybersecurity interns the preceding fall, sometimes closing applications before December. Smaller companies and co-ops post much closer to start dates. Checking consistently across the full academic year means you don't miss either window.
Build a portfolio before you need it
At the intern stage, projects carry more weight than work history. Document two or three complete cybersecurity projects, capture-the-flag write-ups, home-lab configurations, or vulnerability research, naming the tools used and hosting the work somewhere a recruiter can read it without asking.
Work campus connections alongside direct applications
Career fairs surface structured programs tied specifically to your university, and professors or career center staff often know which employers recruit from your school before roles go public. Applying directly to companies running smaller cohorts alongside campus activity reaches employers who don't attend fairs.
Practice your technical screen out loud
Cybersecurity intern interviews typically include a technical screen covering networking fundamentals, threat concepts, or security tooling, some roles add a hands-on component or a scenario walkthrough. Practice explaining your reasoning aloud, not just reaching the right answer, because interviewers weigh how you think as much as the conclusion.
Target structured security internship programs early
Larger employers in defense, government, and enterprise technology run cohort or rotational security programs built to train candidates new to the field, the DoD Cyber Scholarship Program is one well-known example. These programs recruit early, fill fast, and often have fixed application windows, so identify the ones that fit and apply in the first wave.
Set your work-type filter before you start
On-site roles are 50% of the cybersecurity internships listed here. Decide what you can actually commit to before you begin reviewing listings, then filter by location and work type on Migrate Mate so you're only spending time on roles you can take.
Cybersecurity Internships: Frequently Asked Questions
How do I get a cybersecurity internship?
Lead with coursework, personal projects, and a portfolio rather than work history, hiring teams expect limited experience at the intern level. A documented lab or capture-the-flag write-up gives recruiters something concrete to assess. Combine direct applications with campus career fairs, where cybersecurity recruiters often move faster for students they meet in person.
Can a cybersecurity internship turn into a full-time job?
Many employers extend return offers to strong interns, but conversion is never guaranteed. What actually drives it is performance on real security work, available headcount on the team, and how early you signal interest in returning. Treat the internship as an extended audition and ask about return-offer timelines before your final weeks.
When should I apply for cybersecurity internships?
Earlier than most candidates expect. Large employers in defense, finance, and technology recruit summer interns the preceding fall, with deadlines sometimes arriving before December. Smaller companies and co-op programs post closer to the actual start date, so openings appear year-round and checking regularly pays off.
Are cybersecurity internships paid?
Most professional cybersecurity internships in the United States are paid. Compensation varies by company size, industry, and location. Where employers disclose pay, the listing shows it, filter by disclosed compensation if that information matters to your decision.
What should a cybersecurity internship resume include?
Lead with projects, not work history. Include two or three complete, documented projects naming the tools used and linking to the work, a GitHub repository with write-ups, a capture-the-flag portfolio, or a home-lab walkthrough gives recruiters something real to evaluate. Add relevant coursework, certifications in progress, and keep the whole document to one page.
Are there remote cybersecurity internships?
Yes. Remote and hybrid roles make up 50% of the cybersecurity internship listings here, with the rest on-site. Remote security cohorts fill quickly because they attract candidates nationally, so apply early and use the work-type filter to see them without sorting through roles you can't take.
What is a DoD Cyber Scholarship Program (CySP) internship?
The CySP is a structured, federally funded program placing cybersecurity students at Department of Defense agencies for summer internships, often with scholarship support attached. It targets students new to federal security work, recruits early in the academic year, and is competitive, so identify the application window and apply in the first wave.
Can international students get cybersecurity internships?
Yes. F-1 students can intern through CPT while enrolled or through OPT work authorization after finishing a degree, and the employer does not have to file anything for either, so many companies are open to international interns. Confirm your eligibility and timing with your university's international student office before accepting an offer.
See All 15 Cybersecurity Internship Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cybersecurity Internships