Cyber Testing Intern - Summer 2027

RSM US LLP is a professional services firm serving middle-market clients globally. The Cyber Testing Intern will support the Cyber Risk and Data Protection practice by assessing security, conducting application and penetration testing, investigating cyber threats, evaluating compliance, and communicating technical findings to clients.

What you'll do:

• Assess security of client networks, hosts, and applications
• Determine technical, business impact and likelihood of identified security issues and provide remediation guidance to clients
• Perform analysis and testing to verify the strengths and weaknesses of mobile and web applications and web services (SOAP, WSDL, UDDI)
• Perform Internet penetration testing using blackbox and whitebox methodologies
• Review application code, system configurations and device configurations using manual and automated techniques
• Measure and report clients’ compliance with established industry or government requirements
• Identify leaked client data on open and closed (Deep and Dark Web) sources
• Perform analytical investigations into specific threat actors, ransomware, and campaigns
• Communicate technical findings to a non-technical audience effectively
• Create and review threat intelligence programs for clients using established intelligence models
• Work with RSM consulting professionals with a variety of credentials including Certified Ethical Hacker (CEH), Certified Information Systems Security Professionals® (CISSP®), Certified Information Systems Auditor® (CISA®), Certified Information Security Manager® (CISM®), Certified Threat Intelligence Analyst (CTIA®)

What they're looking for:

• Pursuing a B.A. or B.S. degree or equivalent from an accredited university by the time employment commences with a major in Computer Science, Information Technology, Information Systems Management, Information Security, intelligence, digital forensics, cybersecurity or other similar degrees
• Technical background in computer science and cybersecurity related fields
• Strong knowledge of computer network technologies, protocols/topologies, digital forensics and endpoint protection, or threat intelligence
• Software development, programming and/or scripting experience (Perl, Python, C, Java, PHP, ASP, etc.)
• Ability to track threat actors across Dark Web criminal forums and marketplaces and ability to communicate findings
• Ability to track malware campaigns and understand adversarial activity from an intelligence perspective
• Basic understanding of intelligence, including intelligence lifecycle, Kill Chain, Diamond model, and Priority Intelligence Requirements
• Proven track record of an analytical and curious mindset in problem solving
• The ability to interpret and convey technical information through written and oral communications to all levels of technical aptitude, including senior management
• High degree of integrity and confidentiality, as well as ability to adhere to company policies and best practices
• Possess a strong internal drive and motivation for continuous improvement
• A minimum 3.0 GPA is preferred

Benefits:

• Flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.