Cyber Resilience & Product Security Intern
About The Position
This full-time, on-site summer 2027 internship in Michigan City, Indiana, runs from May through August 2027. The intern will review digital elements of DwyerOmega products, support cybersecurity risk assessments, develop technical documentation, assist with European Union Cyber Resilience Act (CRA) compliance efforts, and contribute to governance framework development. The role is intended for a student or early-career professional interested in cybersecurity, product security, regulatory compliance, and embedded or digital systems in industrial products. The position operates primarily at an office workstation, with occasional visits to manufacturing production areas and labs. Manufacturing areas may include machinery, mechanical equipment, and other manufacturing conditions; appropriate PPE may be required in designated areas. Relocation assistance is available as needed. The internship offers meaningful project work, mentorship, cross-functional collaboration, career-development and networking programming, and exposure to broader business operations.
Requirements
- Currently pursuing a bachelor's or master's degree in cybersecurity, computer engineering, electrical engineering, computer science, information systems, or a related technical discipline.
- Basic understanding of cybersecurity principles, including STRIDE, threat modeling, and vulnerability management.
- Familiarity with embedded systems, firmware, or network-connected devices.
- Strong analytical and documentation skills.
- Ability to review technical systems and translate findings into structured documentation.
- Proficiency in Microsoft Office, including Word, Excel, and PowerPoint.
- Strong attention to detail and ability to work independently.
Nice To Haves
- Exposure to product security, IoT security, or industrial control systems.
- Familiarity with regulatory frameworks.
- Experience with risk assessment methodologies.
- Basic understanding of the secure software development lifecycle (SSDLC).
Responsibilities
- Analyze and document product digital components, including firmware, software, connectivity features, embedded systems, and cloud interfaces.
- Identify potential cybersecurity risks associated with product digital elements.
- Support vulnerability identification and mitigation tracking.
- Assist engineering teams in documenting product security architectures.
- Conduct structured cybersecurity risk assessments for products.
- Support threat modeling and risk classification activities.
- Develop and maintain technical security documentation, risk registers, security requirement traceability documentation, and compliance evidence artifacts.
- Assist with gap analysis against Cyber Resilience Act requirements.
- Support development of compliance documentation aligned with CRA obligations.
- Help organize product cybersecurity technical files.
- Contribute to secure development lifecycle documentation.
- Assist in developing and refining cyber governance frameworks.
- Support documentation of internal cybersecurity policies and procedures.
- Help define product security controls aligned with applicable industry standards, such as NIST CSF, ISO 27001, and IEC 62443.
- Support internal audit preparation and evidence gathering.
Benefits
- Relocation assistance as needed.
- Meaningful, real-world project experience.
- Learning from experienced mentors and industry experts.
- Teamwork and cross-functional collaboration skills development.
- Insight into business operations and how the department supports broader company goals.
- Intern-focused programming designed to support career development and networking.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Intern
