Cybersecurity Intern

Highline Warren is seeking a Cybersecurity Intern to support its Enterprise Security team in building and maturing the company’s security program. The intern will contribute to security documentation, vendor and vulnerability risk management, assessments, framework research, and security awareness, with exposure to cloud and industrial security.

What you'll do:

• Security documentation: Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team
• Third-party risk management (TPRM): Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses
• Vulnerability management support: Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences
• Assessment & audit support: Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment)
• Framework research & mapping: Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses
• Security awareness: Support the awareness program — phishing-simulation logistics, training content, and internal communications

What they're looking for:

• Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts)
• Strong written communication and documentation skills; able to translate technical detail into clear, organized material
• Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams)
• Demonstrated reliability and sound judgment in handling confidential and sensitive information
• Familiarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443)
• Exposure to scripting or automation (e.g., Python, PowerShell)
• Interest in cloud security, identity, OT/ICS security, or manufacturing environments
• Progress toward a relevant certification (e.g., CompTIA Security+)
• Familiarity with ticketing or project tools (e.g., Jira)

Benefits:

• Direct experience building security capabilities in an emerging-maturity program.
• Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.
• Practical experience with third-party risk management, cloud security, and identity.
• Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.
• Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.