Information Security Engineer Internships
Information security engineer internships give university students, recent graduates, and early-career switchers hands-on project experience protecting real systems, mentorship from working security engineers, and, at many employers, a path toward a full-time offer. Openings are concentrated across {{top_industries_phrase}}, with Fifth Third Bank, Sony, and Tesla among the employers posting roles now.
Find InternshipsOverview
Showing 5 of 9+ Information Security Engineer Internships
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Information Security Engineer Internship Market
Who's Hiring
Tips for Your Information Security Engineer Internship Search
Apply in fall for summer security internships
Large technology companies, defense contractors, and financial institutions open summer internship applications as early as August. Waiting until spring means competing for a much smaller pool of late-posted roles. Set a reminder to start your search at the beginning of the academic fall semester.
Build a portfolio before you apply
Hiring teams for information security engineer interns evaluate technical evidence, not job history. Document two or three hands-on projects, CTF challenge write-ups, home-lab setups, or vulnerability research, in a public GitHub repo or personal site so recruiters have something concrete to assess when your resume has limited work experience.
Combine campus recruiting with direct applications
Campus career fairs surface structured internship programs tied to your university, and recruiters there often move faster for students they meet in person. Your professors and career center staff may know which security employers recruit from your school before roles post publicly. Applying directly to companies running smaller cohorts alongside campus activity widens the pool you reach.
Practice your technical screen out loud before interviews
Information security engineer intern screens typically involve a technical component covering networking fundamentals, operating system concepts, and scenario-based security questions. Practice explaining your reasoning as you work through problems, interviewers weigh how you think about a threat or vulnerability as much as whether you reach the right answer.
Target structured security internship programs early
Many large employers run dedicated security or cybersecurity rotational cohorts designed to train candidates new to the field. These programs recruit ahead of general internship postings and fill fast. Identify the ones that fit your background, note their application open dates, and submit in the first wave rather than waiting for reminders.
Set your work-type filter before you start
On-site roles are 80% of the information security engineer internships listed here. Decide what you can actually commit to before you start reviewing listings, then filter by location and work type on Migrate Mate so you are not sorting through roles you cannot accept.
Information Security Engineer Internships: Frequently Asked Questions
How do I get an information security engineer internship?
Lead with coursework and personal projects rather than work history, hiring teams expect limited experience at the intern level. Build a portfolio with documented security labs, CTF write-ups, or home-lab configurations so recruiters have something concrete to evaluate. Combine direct applications with campus career fairs, where security recruiters often move faster for students they meet in person.
Can an information security engineer internship turn into a full-time job?
Many employers extend return offers to strong interns, but conversion is never guaranteed. What drives it most for information security engineer interns is performance on real work, team headcount at offer time, and return-offer timelines that vary by company. Deliver on your assigned projects, ask questions that show security instincts, and treat the internship as an audition without counting on the outcome.
When should I apply for information security engineer internships?
Earlier than most candidates expect. Large technology companies, defense contractors, and financial institutions recruit summer interns the preceding fall, with many application windows opening in August and September. Smaller companies and co-op programs post closer to start dates, so openings appear year-round and a missed fall cycle does not close off all options.
Are information security engineer internships paid?
Most professional information security engineer internships in the U.S. are paid. Compensation varies by company size, industry, and location, and listings show it where the employer chooses to disclose it. Government and nonprofit roles occasionally offer unpaid or stipend-based positions, so check the listing details before applying.
What should an information security engineer internship resume include?
Lead with projects, not work history. Include two or three complete, documented security projects that name the tools used and link to a GitHub repo, CTF profile, or write-up where the recruiter can verify the work. Add relevant coursework in networking, cryptography, or operating systems. Keep it to one page.
Are there remote information security engineer internships?
Yes. Remote and hybrid roles make up 20% of the information security engineer internship listings here, with the rest on-site. Remote security internship cohorts fill fast, so apply early and filter by work type to see those roles before they close.
What is a security operations center (SOC) analyst internship?
A SOC analyst internship places you inside a security operations team monitoring alerts, triaging incidents, and supporting threat detection in real time. It targets candidates new to applied security work and is one of the most common entry points for information security engineer interns. SOC programs at larger companies recruit early and are competitive, so apply in the first wave of postings.
Can international students get information security engineer internships?
Yes. F-1 students can intern through CPT while enrolled or through OPT work authorization after finishing a degree, and the employer does not have to file anything for either, so many companies are open to international interns. Confirm your eligibility and timing with your university's international student office before accepting an offer.
See All 9 Information Security Engineer Internship Jobs
Find roles that match your experience and apply in just a few clicks.
Find Internships