Information Security Specialist Internships
Information security specialist internships give university students, recent graduates, and early-career switchers hands-on project experience protecting real systems, mentorship from working security engineers, and, at many employers, a path toward a full-time offer. Openings cover {{top_industries_phrase}}, with Fifth Third Bank, Sony, and Tesla among the employers posting roles now.
Find InternshipsOverview
Showing 5 of 9+ Information Security Specialist Internships
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en .
Position Summary
Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.
This position will report to the Manager, Information Security , and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.
This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.
Responsibilities:
- Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
- Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
- Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
- Assist in maintaining third-party asset inventory in the GRC tool.
- Contribute to the development and improvement of third-party risk management processes.
- Participate in the creation and delivery of information security awareness, training, and education program materials.
Qualifications:
- Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
- Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
- Working knowledge of GRC tools such as RSA Archer a plus.
- Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
- Excellent writing skills with a proven ability to write clear, unambiguous instructions.
- Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
- All candidates must be authorized to work in the USA.
The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.
All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)
Information Security Specialist Internship Market
Who's Hiring
Tips for Your Information Security Specialist Internship Search
Apply in the fall for summer roles
Large employers open summer information security specialist internship applications as early as August or September the year before. If you wait until spring, many structured cohorts are already closed. Set reminders to check company careers pages in early fall and submit applications before recruiting windows close.
Build a portfolio recruiters can actually assess
Work history matters less than evidence at the intern level. Document two or three security projects with the tools you used and outcomes you achieved. Linked GitHub repositories, capture-the-flag writeups, or home lab documentation give information security specialist hiring teams something concrete to evaluate before your first interview.
Work your campus network and apply directly at the same time
Campus career fairs surface structured programs tied to your university, and professors or career center staff often know which security employers recruit from your school before roles post publicly. Apply directly to companies running smaller cohorts at the same time so you are reaching employers your campus network does not cover.
Practice your technical screen out loud before you apply
Information security specialist intern screens typically include a technical component covering network fundamentals, threat identification, or a short scenario-based exercise. Practice explaining your reasoning aloud, not just arriving at an answer, because interviewers weigh how you think through a problem as much as the final response you give.
Target structured security internship programs early
Larger employers and government contractors run cohort-based security internship programs, including SOC analyst tracks and cybersecurity rotational programs, built to train candidates new to the field. These programs recruit in the first wave of fall recruiting, fill faster than general internship postings, and often have dedicated application portals separate from the main careers page.
Set your work-type filter before you start searching
On-site roles are 80% of the information security specialist internships listed here. Decide what location and work arrangement you can commit to before you start applying, then filter by work type on Migrate Mate so you are not sorting through roles you cannot take.
Information Security Specialist Internships: Frequently Asked Questions
How do I get an information security specialist internship?
Lead with coursework and personal projects rather than work history, since hiring teams expect limited experience at the intern level. Build a portfolio that gives recruiters something concrete to assess: documented labs, capture-the-flag writeups, or a GitHub repository showing your tools and methodology. Combine direct applications with campus career fairs, where security recruiters often move faster for students they meet in person.
Can an information security specialist internship turn into a full-time job?
Many employers extend return offers to strong interns, but conversion is never guaranteed. What drives it for information security specialist interns is consistent performance on real work, available headcount on the team, and understanding when the return-offer decision happens so you can ask about it early. Position yourself for one, but keep applying to full-time roles independently rather than counting on it.
When should I apply for information security specialist internships?
Earlier than most expect. Large employers recruit summer cohorts the preceding fall, meaning applications open in August or September for roles that start the following June. Smaller companies and co-op programs post closer to their actual start dates, so openings appear year-round. Checking listings regularly and acting quickly when a match appears is more effective than waiting for a single application season.
Are information security specialist internships paid?
Most professional information security specialist internships in the U.S. are paid. Compensation varies by company size, industry, and location, and listings show it where the employer discloses it. Smaller organizations and some nonprofit or government programs may offer stipends or academic credit in place of a salary, so read each listing carefully before applying.
What should an information security specialist internship resume include?
Lead with two or three complete, documented projects rather than work history. Each project should name the tools and frameworks used and link to something reviewers can assess, such as a GitHub repository, a published vulnerability writeup, or a capture-the-flag solution. Add relevant coursework, certifications like CompTIA Security+ or Google Cybersecurity, and keep the entire resume to one page.
Are there remote information security specialist internships?
Yes. Remote and hybrid roles make up 20% of the information security specialist internship listings here, with the rest on-site. Remote cohorts fill fast because they attract applicants from across the country, so apply early and filter by work type to see them before they close.
What is a Security Operations Center (SOC) analyst internship?
A SOC analyst internship is a structured program at larger security-focused employers and managed service providers that places interns directly in a security operations environment, monitoring threats and triaging alerts alongside full-time analysts. These programs target candidates new to the field, recruit early in the fall semester, and are competitive, so identify the ones that fit your timeline and apply in the first wave.
Can international students get information security specialist internships?
Yes. F-1 students can intern through CPT while enrolled or through OPT work authorization after finishing a degree, and the employer does not have to file anything for either, so many companies are open to international interns. Confirm your eligibility and timing with your university's international student office before accepting an offer.
See All 9 Information Security Specialist Internship Jobs
Find roles that match your experience and apply in just a few clicks.
Find Internships