Cybersecurity Analyst Intern

$44,850 - $81,075/Yr

Leidos

Full-time - Intern

Professional, Scientific, and Technical Services

About the position

The Digital Modernization Group at Leidos is seeking a Cybersecurity Analyst intern to join the Global Solutions Management - Operations II (GSM-O II) contract. This contract is focused on the Operations, Sustainment, Maintenance, Repair, and Defense of the Defense Information System Network (DISN) within the Department of Defense Information Network (DODIN), supporting the Defense Information Systems Agency (DISA). The position is based onsite at Ford Island, Hawaii, and requires a highly motivated and capable candidate to support the Cybersecurity/Network Assurance team. As a Cybersecurity Analyst intern, you will engage in various tasks including cyber threat intelligence analysis, correlating actionable security events, and performing network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor outputs. You will also participate in coordinating resources during incident response efforts. The role demands a collaborative approach, as you will be working closely with other analysts to articulate findings, updates, and analyses effectively. Additionally, you will be responsible for creating complex technical reports based on your analytic findings, which requires strong written and verbal communication skills. Candidates must be currently enrolled in an Associate's, Bachelor's, or Master's program in Cybersecurity or a related discipline. The internship is designed for students who have not graduated prior to May 2025 and who are actively enrolled in a degree plan extending into fall 2025. The position also requires the ability to obtain a Secret clearance, and candidates must be U.S. citizens. Local colleges near Honolulu, HI, are encouraged to apply.

Responsibilities

• Perform cyber threat intelligence analysis.
• Correlate actionable security events.
• Perform network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor output.
• Participate in the coordination of resources during incident response efforts.
• Review DoD and open-source intelligence for threats.
• Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.
• Utilize alerts from endpoints, IDS/IPS, Netflow, and custom sensors to identify compromises on customer networks/endpoints.
• Review log files, pivot between data sets, and correlate evidence for incident investigations.
• Articulate findings, updates, and analysis effectively.
• Create complex technical reports on analytic findings.

Requirements

• Current enrollment in an Associate's, Bachelor's or Master's program in Cybersecurity or related discipline is required.
• Excellent written/verbal skills with the ability to interpret and author well-formed documents.
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cybersecurity domain.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
• Understanding of Anti-Virus, HIPS, IDS/IPS, Full Packet Capture, Host-Based Forensics, Network Forensics.
• Familiarity or knowledge of malware analysis concepts and methods.
• Familiarity or knowledge of Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.
• Ability to obtain a Secret clearance is required to start.
• Must be a US Citizen to qualify.

Nice-to-haves

• Security+ and/or CySA+ certifications.
• Academic knowledge of CND domains (Protect, Detect, Respond and Sustain).
• Understanding of Computer Incident Response organizations or Security Operations Centers.
• Familiarity with an enterprise SIEM platform like Splunk or Elastic.
• Unix/Linux command line experience.
• Detail oriented.
• Scripting and programming experience.
• Highly engaged and willing/able to collaborate with other analysts.
• Emotional Intelligence.

Benefits

• Internship experience in a leading defense and technology company.
• Opportunity to work on significant cybersecurity projects.
• Collaboration with experienced professionals in the field.