Cyber Analyst Intern - Summer 2027
About The Position
CACI is excited to announce paid internship opportunities for Cyber Security Analysts to support our NASA Consolidated Applications Platforms Services (NCAPS) contract. As a successful candidate, you will conduct information security risk assessments in accordance with the NIST Risk Management Framework for new projects and associated infrastructure and applications. You will assess the effectiveness of internal security controls, participate in the SDLC as both a risk assessor and advisor for best practices, and maintain knowledge of security and privacy laws, industry best practices, and technological changes to advise on potential impacts. Additionally, you will serve as a Security Technical Liaison to project and functional teams and support FISMA audit requirements. Join us in this dynamic role and contribute to the security of NASA's critical applications.
Requirements
- Must be currently enrolled and pursuing an undergraduate or graduate degree in Cyber Security or related area.
- Understanding of what an Information Security role is.
- Working knowledge of the NIST RMF and implementation of NIST SP 800-53 IA Controls.
- Knowledge on performing risk assessments (e.g., evaluate threats, vulnerabilities, likelihood, and impact) and identifying mitigating controls.
- System security planning
- Incident response and handling
- Knowledge with various vulnerability assessment tools such as Nessus, HP WebInspect, HP Fortify, Burpsuite, etc.
- Broad technology background; distributed systems (Linux, Solaris, Windows, enterprise applications (such as databases, SAP, etc.) and application development and architecture (SDLC).
- Understanding of mitigating controls at the systems, network, and application level
- Ability to work both in a team construct and independently.
- Ability to build and maintain constructive working relationships with a diverse community (in and outside of technology) is critical; ability to effectively communicate (both written and verbal) with and influence both technical and non-technical audiences.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Nice To Haves
- Firewall ruleset analysis
- Web application scanning
- Web application & system vulnerability assessment
- Web application static code analysis
- SAP access management security
- Security in agile environments
- Minimum of CompTIA Security+ certification is a plus.
Responsibilities
- Maintain Application Security Plan (ASP)
- Manage the completion of the risk assessment
- Create Plan of Action & Milestone (POAM)
- Manage Application vulnerability mitigation strategy
- Manage Application contingency plan
- Conduct Firewall Rule Analysis
- Conduct Continuous Monitoring of applications, databases, & systems
- Manage asset inventory
- Perform Compliance monitoring
- Perform File Integrity monitoring
- Perform Log Management
- Provide Monthly reporting and metrics
- Perform Incident/vulnerability response duties
- Conduct Vulnerability Scanning analysis & mitigation tracking
- Conduct Application scanning analysis & mitigation tracking
- Communicate with Security Operations Center (SOC)
- Communicate with Marshall Incident Response Team (MIRT)
Benefits
- healthcare
- wellness
- financial
- retirement
- family support
- continuing education
- time off benefits
- flexible time off benefit
- robust learning resources
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Part-time
Career Level
Intern
Education Level
Associate degree
