Information Security Analyst Internships
Information security analyst internships give university students, recent graduates, and early-career switchers hands-on project experience protecting real systems, mentorship from working security analysts, and, at many employers, a path toward a full-time offer. Openings are concentrated in {{top_industries_phrase}}, with Fifth Third Bank, Sony, and Tesla among the employers posting roles now.
Find InternshipsOverview
Showing 5 of 9+ Information Security Analyst Internships
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Information Security Analyst Internship Market
Who's Hiring
Tips for Your Information Security Analyst Internship Search
Apply in the fall for summer roles
Large employers, including federal contractors, financial firms, and major technology companies, open summer information security analyst internship applications as early as August and close them by November. Smaller companies and co-op programs post closer to their start dates, so searching year-round keeps you ahead of each wave as it opens.
Build a project portfolio before you apply
Hiring teams assessing information security analyst interns look for documented proof of hands-on work, not just a list of coursework. A GitHub repository with a network scanner, a write-up of a CTF challenge, or a home lab build log with screenshots gives recruiters something concrete to evaluate and sets your application apart from candidates who list only classes.
Work your campus network alongside direct applications
Campus career fairs surface structured internship programs tied to your university, and professors or career center staff often know which security employers recruit from your school before roles post publicly. At the same time, apply directly to companies running smaller cohorts that do not recruit on campus, since those roles see fewer applicants and can move faster.
Practice your technical screen out loud before interviews
Information security analyst intern interviews typically include a technical screen covering networking fundamentals, common vulnerability types, and scenario-based questions about how you would respond to a security incident. Practice answering out loud and narrating your reasoning, since interviewers weigh how you think through a problem as much as whether you land on the right answer.
Target structured security internship programs early
Rotational and cohort-based security internship programs at larger employers, including federal agencies and defense contractors, are built to train people new to the field across multiple team placements in a single term. They recruit in the fall, fill fast, and are competitive. Identify the programs that match your background and apply in the first application window.
Set your work-type filter before you start searching
On-site roles are 80% of the information security analyst internships listed here. Decide what you can realistically commit to before you start applying, then filter by location and work type on Migrate Mate so you spend your time on roles you can actually take rather than sorting through listings that do not fit your situation.
Information Security Analyst Internships: Frequently Asked Questions
How do I get an information security analyst internship?
Lead with coursework and personal projects rather than work history, since hiring teams expect limited experience at the intern level. The concrete artifact that gives recruiters something to assess is a portfolio of documented security projects, such as a write-up of a CTF challenge, a home lab build log, or a vulnerability assessment report. Combine direct applications with campus career fairs, where recruiters often move faster for students they meet in person.
Can an information security analyst internship turn into a full-time job?
Many employers extend return offers to strong interns, but conversion is never guaranteed. What actually drives it for information security analyst interns is performance on real work, available team headcount at the end of the term, and how early you signal interest in returning. Position for a return offer by taking ownership of a project and asking for feedback mid-internship, without counting on the outcome.
When should I apply for information security analyst internships?
Earlier than most students expect. Large employers, including federal contractors and major tech and finance firms, recruit summer information security analyst interns the preceding fall, with applications closing as early as October or November. Smaller companies and co-op programs post closer to start dates, so openings appear year-round. Check listings regularly rather than waiting for a single season.
Are information security analyst internships paid?
Most professional information security analyst internships in the United States are paid. Compensation varies by company size, industry, and location, and listings show it where the employer discloses it. Unpaid internships exist but are uncommon at established employers in this field. Filter listings by pay disclosure where available to focus on roles that match your needs.
What should an information security analyst internship resume include?
Lead with projects, not work history. Include two or three complete, documented projects that name the tools used and link to the work, such as a GitHub repository with a network scanner, a write-up of a penetration testing lab, or a documented incident response exercise. Add relevant coursework, any security certifications in progress, and keep the resume to one page.
Are there remote information security analyst internships?
Yes. Remote and hybrid roles make up 20% of the information security analyst internship listings here, with the rest on-site. Remote cohorts fill fast because they draw applicants nationally, so apply early once you decide remote works for your situation. Use the work-type filter to see only remote or hybrid listings and avoid sorting through roles you cannot take.
What is a cybersecurity internship rotational program?
Several large employers, particularly federal agencies, defense contractors, and financial institutions, run structured rotational security internships that place participants in two or three team rotations, such as threat intelligence, security operations, and compliance, over a single summer or academic term. These programs target people new to the field, provide structured mentorship, and recruit early in the fall, making them competitive. Apply in the first wave when applications open.
Can international students get information security analyst internships?
Yes. F-1 students can intern through CPT while enrolled or through OPT work authorization after finishing a degree, and the employer does not have to file anything for either, so many companies are open to international interns. Confirm your eligibility and timing with your university's international student office before accepting an offer.
See All 9 Information Security Analyst Internship Jobs
Find roles that match your experience and apply in just a few clicks.
Find Internships