Cybersecurity Analyst Intern

$44,850 - $81,075/Yr

Leidos - Hill Air Force Base, UT

Full-time - Intern

Hill Air Force Base, UT

Professional, Scientific, and Technical Services

About the position

The Digital Modernization Group at Leidos is seeking a Cybersecurity Analyst Intern to join the Global Solutions Management - Operations II (GSM-O II) contract team. This contract is focused on the Operations, Sustainment, Maintenance, Repair, and Defense of the Defense Information System Network (DISN) within the Department of Defense Information Network (DODIN), supporting the Defense Information Systems Agency (DISA). The position is based at Hill Air Force Base in Utah and requires onsite support. As a Cybersecurity Analyst Intern, you will be part of a highly motivated team dedicated to ensuring the security and integrity of communications networks. In this role, you will perform cyber threat intelligence analysis, correlate actionable security events, and conduct network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor outputs. You will also participate in coordinating resources during incident response efforts. The ideal candidate will be comfortable working in a highly collaborative environment and will possess strong written and verbal communication skills to articulate findings and updates effectively. You will be expected to create complex technical reports based on your analytic findings, contributing to the overall cybersecurity posture of the organization. This internship is an excellent opportunity for students currently enrolled in a Cybersecurity or related discipline, providing hands-on experience in a critical field while working alongside experienced professionals in the cybersecurity domain. Candidates must be actively enrolled in a degree program that extends into fall 2025 and must not have graduated prior to May 2025.

Responsibilities

• Perform cyber threat intelligence analysis and correlate actionable security events.
• Conduct network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor outputs.
• Review DoD and open-source intelligence for threats.
• Identify Indicators of Compromise (IOCs) and integrate them into sensors and SIEMs.
• Utilize alerts from endpoints, IDS/IPS, Netflow, and custom sensors to identify compromises on customer networks/endpoints.
• Review log files, pivot between data sets, and correlate evidence for incident investigations.
• Work collaboratively in a team environment and articulate findings, updates, and analysis effectively.
• Create complex technical reports on analytic findings.

Requirements

• Current enrollment in an Associate's, Bachelor's, or Master's program in Cybersecurity or a related discipline is required.
• Excellent written and verbal communication skills with the ability to interpret and author well-formed documents.
• Demonstrated commitment to training, self-study, and maintaining proficiency in the technical cybersecurity domain.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Understanding of Anti-Virus, HIPS, IDS/IPS, Full Packet Capture, Host-Based Forensics, and Network Forensics.
• Familiarity or knowledge of malware analysis concepts and methods.
• Familiarity or knowledge of Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.
• Ability to obtain a Secret clearance is required to start (selected candidates will be sponsored for required clearance).
• Must be a US Citizen to qualify.

Nice-to-haves

• Security+ and/or CySA+ certifications.
• Academic knowledge of CND domains (Protect, Detect, Respond, and Sustain).
• Understanding of Computer Incident Response organizations or Security Operations Centers.
• Familiarity with an enterprise SIEM platform like Splunk or Elastic.
• Unix/Linux command line experience.
• Detail-oriented with scripting and programming experience.
• Highly engaged and willing/able to collaborate with other analysts.
• Emotional Intelligence.

Benefits

• Hands-on experience in a critical cybersecurity role.
• Opportunity to work with experienced professionals in the field.
• Potential for future employment opportunities within Leidos after graduation.