Cybersecurity Analyst Intern

Leidos is a defense, intelligence, and technology company seeking motivated cybersecurity students for its Summer 2027 Internship Program. The Cybersecurity Analyst Intern will support cybersecurity operations and active defense of Defense Information System Network infrastructure while gaining hands-on experience in security alert analysis, threat intelligence, network traffic analysis, incident response, and technical documentation.

What you'll do:

• Learn to triage and analyze security alerts from various sources (SIEM, IDS/IPS, NetFlow) to identify potential malicious activity on customer networks
• Assist senior analysts in performing network traffic analysis and correlating actionable security events using raw packet data and custom sensor outputs
• Shadow incident response efforts, learning how the team coordinates resources during containment, eradication, and recovery activities
• Gain exposure to cyber threat intelligence by reviewing open-source feeds and learning how to identify Indicators of Compromise (IOCs) to improve detection capabilities
• Practice conducting preliminary analysis of potential security incidents, such as investigating suspicious network connections and reviewing system logs for anomalous activity
• Help create clear, concise technical documentation and incident reports for leadership and mission partners

What they're looking for:

• Must be a U.S. citizen and eligible to obtain a DoD Secret security clearance
• Currently pursuing a degree in a relevant field such as Cybersecurity, Computer Science, Computer Engineering, or Information Technology
• A solid understanding of TCP/IP protocols, common networking ports (e.g., 80, 443, 21, 22), the OSI model, and principles of defense-in-depth
• Academic knowledge of the Cyber Kill Chain methodology and/or the MITRE ATT&CK framework, and basic malware analysis concepts (static/dynamic analysis)
• A proactive, eager-to-learn attitude with the ability to analyze security alerts and identify potential false positives
• A collaborative attitude with strong written and verbal communication skills
• This internship is based on-site at Ford Island, HI. All work must be performed on site – no teleworking opportunities. Candidates must have their own reliable transportation to and from the facility at Ford Island, HI
• Obtaining a CompTIA Security+ or CySA+ certification (or any certification that aligns with DoD 8570 IAT Level II) before the start date is strongly encouraged
• Prior experience from home labs (e.g., VirusTotal, basic sandboxing), Capture the Flag (CTF) competitions, or class projects involving network defense
• Enterprise SIEM platforms like Splunk or Elastic
• Unix/Linux command line environments and Windows system administration
• Basic scripting and programming (e.g., Python, Bash)