Cybersecurity Intern

Customized Energy Solutions•Philadelphia, PA

12h

About The Position

Customized Energy Solutions (CES) is seeking a Cybersecurity Intern to support its Infrastructure Services and Security team on a three-month contract engagement. This role is focused on coordinating vulnerability assessment and penetration testing (VAPT) activities conducted by CES external security partners, with a primary emphasis on our SOC 2-scoped applications and other critical platform environments. The intern will serve as a key liaison between external testing partners and internal CES stakeholders throughout the full VAPT lifecycle — from project kickoff through vulnerability remediation tracking. This is an excellent opportunity for an early-career cybersecurity professional to gain hands-on exposure to enterprise security operations, compliance-driven testing programs, and cross-functional stakeholder engagement. Depending on engagement pace and intern readiness, there is potential for expanded involvement in internal scanning activities and AI-assisted security workflows.

Requirements

Currently pursuing or recently completed a degree in Cybersecurity, Information Systems, Computer Science, or a related field
Foundational knowledge of cybersecurity concepts including vulnerability management, network security, and application security
Strong written and verbal communication skills with the ability to translate technical findings for non-technical audiences
Demonstrated ability to manage multiple tasks, deadlines, and stakeholders in a structured, organized manner
Proficiency with productivity and collaboration tools (Microsoft 365, SharePoint, Teams)

Nice To Haves

Familiarity with SOC 2 compliance frameworks or other information security standards (NIST, ISO 27001)
Exposure to vulnerability management concepts or tools (e.g., Rapid7, Qualys, Nessus, Burp Suite)
Experience working on a team-based technical project in an academic or professional setting
Understanding of web application architecture and common vulnerability classes (OWASP Top 10)
Prior internship, co-op, or volunteer experience in a technology or security environment

Responsibilities

Coordinate scheduling, logistics, and communication with external red team and penetration testing vendors
Maintain a master engagement calendar covering test windows, scoping sessions, and review milestones
Serve as the primary point of contact for day-to-day coordination between external partners and the IS security team
Track engagement status and flag scheduling conflicts or scope changes to IS leadership
Draft and distribute clear, audience-appropriate communications to internal teams regarding upcoming test activities, timelines, and potential impacts
Prepare briefing materials and summary documentation for pre-engagement kickoffs and post-engagement reviews
Coordinate access provisioning requests and testing environment logistics with relevant application and infrastructure owners
Maintain a project tracker and status dashboard for all active and upcoming VAPT engagements
Compile and organize vulnerability findings from external partner reports into structured internal formats
Facilitate working sessions with internal application teams to review findings, clarify technical details, and discuss remediation options
Track remediation commitments, target dates, and completion status across all in-scope applications
Escalate past-due or high-severity remediation items to IS leadership as appropriate
Maintain accurate records of vulnerability lifecycle from identification through verified remediation
Produce engagement summaries and status reports for IS leadership and, where applicable, executive stakeholders
Maintain a centralized repository of test plans, findings reports, and remediation records in SharePoint
Support ongoing SOC 2 evidence collection related to VAPT activities