Cybersecurity Analyst Intern

Leidos • Sunset, UT

3d • Onsite

About The Position

Leidos, a leading defense, intelligence, and technology company, is seeking motivated and aspiring cybersecurity students for our Summer 2027 Internship Program (Starts May 2027). As a Cybersecurity Analyst Intern, you will join our Digital Sector on the Global Solutions Management – Operations II (GSM-O II) contract at Hill AFB, UT. This is a unique opportunity to gain hands-on experience in a real-world security environment, contributing to the operations, sustainment, and active defense of the Defense Information System Network (DISN) in support of the Defense Information Systems Agency (DISA). Your Opportunity: Are you ready to move beyond the classroom and hunt for real-world threats? As a member of our Hill AFB cybersecurity team, you will be embedded directly with seasoned Security Operations Center (SOC) analysts who protect and defend critical DoD infrastructure. You will gain exposure to enterprise-grade security tools, threat intelligence analysis, and incident response strategies, gaining hands-on cyber operations experience that truly matters.

Requirements

• Must be a U.S. citizen and eligible to obtain a DoD Secret security clearance.
• Currently pursuing a degree in a relevant field such as Cybersecurity, Computer Science, Computer Engineering, or Information Technology.
• A solid understanding of TCP/IP protocols, common networking ports (e.g., 80, 443, 21, 22), the OSI model, and principles of defense-in-depth.
• Academic knowledge of the Cyber Kill Chain methodology and/or the MITRE ATT&CK framework, and basic malware analysis concepts (static/dynamic analysis).
• A proactive, eager-to-learn attitude with the ability to analyze security alerts and identify potential false positives.
• A collaborative attitude with strong written and verbal communication skills.
• This internship is based on-site at Hill AFB, UT. All work must be performed on site – no teleworking opportunities.
• Candidates must have their own reliable transportation to and from the facility at Hill AFB, UT.

Nice To Haves

• Obtaining a CompTIA Security+ or CySA+ certification (or any certification that aligns with DoD 8570 IAT Level II) before the start date is strongly encouraged.
• Prior experience from home labs (e.g., VirusTotal, basic sandboxing), Capture the Flag (CTF) competitions, or class projects involving network defense.
• Familiarity with enterprise SIEM platforms like Splunk or Elastic.
• Familiarity with Unix/Linux command line environments and Windows system administration.
• Familiarity with basic scripting and programming (e.g., Python, Bash).
• Familiarity with Computer Network Defense (CND) domains: Protect, Detect, Respond, and Sustain.

Responsibilities

• Learn to triage and analyze security alerts from various sources (SIEM, IDS/IPS, NetFlow) to identify potential malicious activity on customer networks.
• Assist senior analysts in performing network traffic analysis and correlating actionable security events using raw packet data and custom sensor outputs.
• Shadow incident response efforts, learning how the team coordinates resources during containment, eradication, and recovery activities.
• Gain exposure to cyber threat intelligence by reviewing open-source feeds and learning how to identify Indicators of Compromise (IOCs) to improve detection capabilities.
• Practice conducting preliminary analysis of potential security incidents, such as investigating suspicious network connections and reviewing system logs for anomalous activity.
• Help create clear, concise technical documentation and incident reports for leadership and mission partners.

Benefits

• Summer 2027 Internship Program
• Gain hands-on experience in a real-world security environment
• Contribute to the operations, sustainment, and active defense of the Defense Information System Network (DISN)
• Embedded directly with seasoned Security Operations Center (SOC) analysts
• Exposure to enterprise-grade security tools, threat intelligence analysis, and incident response strategies
• Gain hands-on cyber operations experience that truly matters.

What This Job Offers

• Career Level: Intern
• Education Level: Associate degree