Cybersecurity Analyst Intern

Leidos • Alexandria, VA

4d • Onsite

About The Position

Leidos, a leading defense, intelligence, and technology company, is seeking motivated and aspiring cybersecurity students for our Summer 2027 Internship Program (Starts May 2027). As a Cybersecurity Analyst Intern, you will join our Digital Sector on the Global Solutions Management – Operations II (GSM-O II) contract at the Mark Center in Alexandria, VA. This is a unique opportunity to gain hands-on experience in a real Security Operations Center (SOC), contributing to the defense of the Defense Information System Network (DISN) in support of the Defense Information Systems Agency (DISA). Your Opportunity: Are you ready to move beyond the classroom and hunt for real-world threats? As a member of our cybersecurity team, you will be embedded directly with SOC analysts, learning how to use enterprise-grade tools to detect and analyze compromises on a global network. You will contribute directly to the security of vital communication networks in a fast-paced, dynamic environment, gaining hands-on experience in cyber operations that truly matters.

Requirements

• Must be a U.S. citizen and able to obtain a DoD Secret security clearance or higher.
• Currently pursuing a degree in a relevant field such as Cybersecurity, Computer Science, or Information Technology.
• A basic understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, and defense-in-depth principles.
• A motivated self-starter with strong analytical and troubleshooting skills.
• A collaborative attitude with strong written and verbal communication skills.
• All work must be performed on site – no teleworking opportunities.

Nice To Haves

• Obtaining a CompTIA Security+ certification (or any certification that aligns with DoD 8570 IAT Level II) before the start date is strongly encouraged.
• Prior experience working in a SOC environment or a Computer Incident Response organization is strongly preferred.
• Experience from home labs, CTF competitions, or class projects is also highly desirable.
• Familiarity with Cybersecurity and Incident Handling concepts (e.g., MITRE AT&CK framework).
• Performing data analysis and using pivot tables to identify trends.
• Willingness to perform shift work, including potential weekend hours.

Responsibilities

• Learn to utilize alerts from endpoints, IDS/IPS, NetFlow, and custom sensors to identify compromises on customer networks.
• Perform junior-level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Assist senior-level SOC personnel by passing triaged alerts and helping to identify malicious actors.
• Practice documenting analysis, findings, and actions in a case management system.
• Support the creation and distribution of incident reports to customers and higher headquarters.

What This Job Offers

• Job Type: Full-time
• Career Level: Intern
• Education Level: Associate degree