Cyber Risk Analyst - Risk Management Intern

Leidos

1d

About The Position

The Cybersecurity Risk Management Internship at Leidos offers a unique opportunity for an entry-level university student to engage in meaningful work with our enterprise cybersecurity risk management team. The intern will assist in enhancing our information security program and risk management framework, contributing to the development and refinement of tools, policies, procedures, and best practices. This role is perfect for someone who is passionate about cybersecurity and eager to apply their knowledge in a complex enterprise setting, working alongside experienced professionals in identifying risks and developing mitigation strategies. Key Opportunities: Engage in hands-on activities to mature Leidos' cybersecurity infrastructure. Apply cybersecurity and network security concepts in a real-world, complex enterprise environment. Utilize critical thinking to contribute significantly to the cyber health of Leidos. Gain practical experience in identifying and managing security risks at an enterprise level.

Requirements

• Currently enrolled in a bachelor’s degree program majoring in a cybersecurity, information technology, or related field and maintaining a minimum 3.0 GPA.
• Must have completed at least Sophomore year in a bachelor’s degree program.
• Must have U.S. Citizenship.
• Obtained at least one relevant professional security industry certification (e.g., CompTIA Security+, Certified Ethical Hacker (CEH), any certification from ISC2, any certification from ISACA, etc.)
• Proven self-motivation, proactive approach, and the ability to independently analyze technical issues and formulate solutions.
• Demonstrated strong interest in cybersecurity, supported by relevant academic projects, coursework, or certifications.
• Proficient in computer networking and network security, including understanding of ports, protocols, encryption, and ability to analyze architectural designs and data flow diagrams.
• Capable of effectively working remotely, maintaining accountable and efficient use of time, ensuring appropriate delivery of assignments and projects.
• Strong communication skills, capable of explaining technical concepts to varied audiences.
• Basic understanding of cyber risk management concepts.
• Some experience with cybersecurity tools and technologies.

Nice To Haves

• Additional relevant security certifications (e.g., from DoD, ISC2, ISACA, SANS, AWS, Microsoft).
• Knowledge of federal standards like NIST SP 800 series and FIPS 199/200.
• Understanding of cloud deployment models (SaaS, IaaS, PaaS).
• Familiarity with programming languages for cybersecurity (Python, Java, PowerShell).
• Knowledge of Windows, Linux, MacOS operating systems from a security perspective.
• Proficient in Microsoft Office applications, in particular expertise with Excel spreadsheets.
• Basic experience developing solutions with Power Platform (Power BI, Power Apps, and Power Automate) to enhance the efficiency of our cybersecurity operations
• Proven experience leading successful initiatives/projects.
• Experience in incident response and threat resolution.
• Willingness to conduct cybersecurity assessments of suppliers and software according to prescribed evaluation criteria.
• Strong writing ability to produce quality technical reports and internal procedure documentation.
• Awareness of possible cybersecurity risks and threats to provide security recommendations for complex IT environments & sourcing decisions.

Responsibilities

• Assist in identifying security vulnerabilities within the network architecture, evaluate risk levels, and recommend mitigation strategies.
• Prepare comprehensive cybersecurity risk assessment reports and internal risk management documentation.
• Analyze and manage risks in complex IT environments, providing security recommendations.
• Contribute to risk management processes and communicate risk-related information to stakeholders effectively.
• Collaborate with cross-functional teams in assessing and communicating risks.
• Support Risk Management Operations staff and the ServiceNow Integrated Risk Management (IRM/GRC) project team with testing, validation, and documentation activities across workflows and controls
• Support ServiceNow Integrated Risk Management (IRM/GRC) tool user acceptance testing (UAT) by performing test cases and tracking results to enable successful tool implementation and operations.

Benefits

• Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.
• Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.
• More details are available here.

What This Job Offers

• Job Type: Full-time
• Career Level: Intern
• Number of Employees: 11-50 employees