Summer Intern – Cybersecurity

Title: Summer Intern – Cybersecurity

Starting Pay: Undergraduate rate - $20 per hour; Graduate rate - $24 per hour

Departmental Mission Statement: Supporting access to justice through the effective use of technology. Partnering with Judges and Court Staff to use technology to make it easier and faster to administer justice while building a culture that values transparency, collaboration, inclusivity, and continuous improvement.

Notes: 

• This is an hybrid internship based in Boston

Position Summary: In this role, you will learn about and spend your time working on several major focus areas of cybersecurity including incident management, vulnerability management, risk management, and awareness and education.
• Provide tier one support for cybersecurity incidents, requests, alerts, and events by conducting initial analysis for troubleshooting, investigation and/or fulfillment.
• Utilize tools to assist with the analysis for troubleshooting, investigation, and fulfillment processes.
• Manage incident and request fulfillment tickets in the enterprise service management platform by creating, updating, assigning, and resolving tickets in a timely manner.
• Collaborate with the cybersecurity, infrastructure, and service delivery teams to triage tickets and issues requiring resolution and/or escalation.
• Learn, understand, and assist with generating Security Information and Event Management (SIEM) queries for anomalous activity identification and investigation.
• Create, review, and update internal cybersecurity technical documentation related to policies, standards, controls, processes, and procedures.
• Create, review, and update user-facing informational and educational resources that is consumable and understandable to a non-technical audience on the enterprise intranet used by all judges and employees.
• Conduct vulnerability scanning and security assessments in support of risk management and audit activities.
• Capture data, provide input, and assist in the generation of key metrics and reports to help in decision-making to reduce the overall cybersecurity risk to the Judicial Branch.
• Assist with rollout of new cybersecurity services and update of existing security services.
• Assist with the administration of the phishing simulation program by running campaigns, building, and reviewing email templates, identifying, and assigning remedial training.
• Assist with development of security awareness and education training program to reduce cybersecurity risk from actions taken by judges and employees and to further strengthen the security culture.

Minimum Requirements:

• Working towards a Bachelor’s Degree or graduate degree, from an accredited college or university
•  Degrees in Information Technology, Information Security, or Computer Science preferred.

Preferred Qualifications:

Technical Experience

• Experience in an IT environment.
• Experience in an information security environment.
• Understanding of technology and how it plays a role in organizations.
• Experience in troubleshooting incidents and problems while working with teams to find solutions.
• Experience with a ticketing system.
• Knowledge about the Center for Internet Security (CIS) controls, National Institute of Standards (NIST) cybersecurity best practices, MITRE ATT&CK framework.
• Knowledge about information/data classification.
• Knowledge about personal identifiable information (PII), personal health information (PHI), and Health Information Portability and Accountability Act (HIPAA).
• Strong interest in the Cybersecurity field.
• Relevant internship or work experience in the field.

Non-Technical Experience

• Excellent communication skills, including verbal and written communications.
• Excellent collaboration skills.
• Excellent customer service orientation.
• Self-starter with ability to work independently.