Cyber Security Intern

RegScale is a continuous controls monitoring platform that helps organizations achieve efficient governance, risk, and compliance outcomes. They are seeking a Cyber Security Intern to explore various areas of cybersecurity while gaining hands-on experience in protecting production systems and maintaining compliance.

What you'll do:

• Support the security operations team in monitoring, triaging, and responding to security alerts and events
• Assist with vulnerability management, including scanning, tracking, and coordinating remediation
• Support security compliance and audit activities (e.g., FedRAMP, SOC 2, NIST 800-53) using the RegScale platform
• Help evaluate and configure security tooling such as SIEM, endpoint protection, and cloud security posture management
• Participate in threat and risk assessments and document findings under guidance from senior security engineers
• Collaborate with the CISO’s team on security monitoring, incident response, and policy development
• Document security processes, playbooks, and lessons learned
• Present a final capstone project or security demo at the end of the internship

What they're looking for:

• Currently pursuing a Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• Familiarity with core security concepts (e.g., networking, operating systems, encryption, or access control)
• Basic understanding of cloud computing concepts (AWS, Azure, or GCP) and cloud security
• Interest in security operations, governance/risk/compliance (GRC), or threat detection
• Ability to learn quickly, ask good questions, and work independently when needed
• Strong written and verbal communication skills

Benefits:

• Mentorship from senior security engineers, architects, and security leaders
• Hands-on experience helping protect production SaaS infrastructure
• Exposure to security operations, GRC, and compliance automation
• Experience contributing to real-world security and compliance projects
• Insight into how modern cloud-native security and compliance platforms are built