Cybersecurity Analyst Intern

$44,850 - $81,075/Yr

Leidos - Scott Air Force Base, IL

Full-time - Intern

Scott Air Force Base, IL

Professional, Scientific, and Technical Services

About the position

The Digital Modernization Group at Leidos is seeking a Cybersecurity Analyst Intern to join the Global Solutions Management - Operations II (GSM-O II) contract team. This contract is focused on the Operations, Sustainment, Maintenance, Repair, and Defense of the Defense Information System Network (DISN) within the Department of Defense Information Network (DODIN), supporting the Defense Information Systems Agency (DISA). The position is based at Scott Air Force Base in Illinois and requires onsite support. As a Cybersecurity Analyst Intern, you will be part of a team dedicated to ensuring the security and integrity of communications networks within the DOD framework. In this role, you will engage in various cybersecurity tasks, including performing cyber threat intelligence analysis, correlating actionable security events, and conducting network traffic analysis using raw packet data, net flow, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and custom sensor outputs. You will also participate in incident response efforts, coordinating resources to address security incidents effectively. The internship is designed for highly motivated candidates who are eager to learn and contribute to the Cybersecurity/Network Assurance team. As an intern, you will be expected to leverage your academic knowledge in Cybersecurity and ideally have prior internship experience or relevant project work that provides hands-on skills. This position offers a unique opportunity to gain practical experience in a critical field while working alongside experienced professionals in a dynamic environment.

Responsibilities

• Review DoD and open-source intelligence for threats.
• Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.
• Triage alerts to identify malicious actors on customer networks.
• Complete moderate-level cyber analysis of potential events.
• Report incidents to customers and USCYBERCOM.
• Create complex technical reports on analytic findings.

Requirements

• Current enrollment in an Associate's, Bachelor's or Master's program in Cybersecurity or related discipline is required.
• Excellent written/verbal skills with the ability to interpret and author well-formed documents.
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical Cybersecurity domain.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
• Understanding of Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics.
• Familiarity or knowledge of malware analysis concepts and methods.
• Familiarity or knowledge of Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATTACK framework.
• Ability to obtain a Secret clearance is required to start.
• Must be a US Citizen to qualify.
• Must have own transportation to enter Scott AFB Illinois.
• Candidates must not have graduated prior to May 2025 and must be actively enrolled in a degree plan that extends into fall 2025.

Nice-to-haves

• Security+ Certification
• Academic knowledge of CND domains (Protect, Detect, Respond and Sustain).
• Understanding of Computer Incident Response organization or Security Operations Center.
• Familiarity with an enterprise SIEM platform like Splunk or Elastic.
• Unix/Linux command line experience.
• Scripting and programming experience.