Cybersecurity Intern

Castleton Commodities International • Stamford, CT

1d

About The Position

The Cybersecurity Intern will support CCI’s Technology organization in protecting the firm’s networks, systems, applications, identities, data, and business operations. This hands-on internship is designed for a student who wants practical exposure to enterprise cybersecurity while contributing to supervised, meaningful work across security operations, vulnerability and exposure management, identity and access security, data protection, AI security governance, third-party risk, incident-response readiness, and security awareness. The intern will work closely with Cybersecurity, Infrastructure, Data Science, DevOps, Global Client Services, Helpdesk, and business stakeholders in a global, fast-paced environment.

Requirements

• Currently pursuing a bachelor’s or master’s degree in Cybersecurity, Data Science, Computer Science, Information Systems, Information Technology, Engineering, or related field.
• Expected graduation in December 2027 or Spring 2028 preferred, though strong candidates with adjacent graduation dates may be considered.
• Strong interest in cybersecurity, information security, technology risk, infrastructure security, application security, cloud security, or security operations career with strong emphasis on applied GenAI/agentic AI use in detection, analysis, and response of cyber events and AI process automation.
• Foundational understanding of core cybersecurity concepts such as identity and access management, endpoint security, network security, cloud security, vulnerability management, phishing/social engineering, incident response, and data protection.
• Strong analytical, investigative, writing, documentation, and organizational skills.
• Ability to handle sensitive information responsibly and follow confidentiality, data handling, and approval requirements.
• Curiosity, creativity, humility, reliability, and willingness to ask questions before acting when the risk or proper process is unclear.
• Ability to communicate clearly with technical and non-technical colleagues and to convert complex issues into concise summaries.

Nice To Haves

• Familiarity with one or more of the following is helpful: SIEM/security monitoring, Microsoft security tools, including Microsoft Purview, CrowdStrike or EDR concepts, ServiceNow/Jira, scripting, PowerShell/Python, cloud platforms, vulnerability scanners, Git/Bitbucket, container security, DLP/Purview, or AI security concepts.
• Experience through coursework, labs, student organizations, certifications, prior internships, capture-the-flag activities, open-source projects, or independent research is a plus.
• Exposure to operational technology, industrial control systems, or commodity/energy infrastructure risk is a plus but not required.

Responsibilities

• Assist with alert review, evidence collection, initial triage notes, escalation summaries, and detection-quality improvement under clear analyst guidance.
• Support tracking, documentation, and prioritization of security findings across endpoints, cloud, external attack surface, applications, and legacy/EOS technology risk, including remediation follow-up and reporting.
• Help maintain incident-response documentation, escalation references, tabletop materials, post-incident action tracking, and lessons-learned templates.
• Contribute to documentation and analysis supporting MFA, Conditional Access, PIM/JIT access, service-account ownership, privileged-access workflows, and access-review improvements.
• Support policy-to-control mapping, AI tool/use-case inventory, approved-use documentation, data-handling guidance, DLP/Purview planning materials, and safe AI usage communications.
• Assist with organizing findings and project materials related to secure SDLC, dependency control, secrets detection, container/cloud security, approved software sourcing, and developer security enablement.
• Help collect and organize vendor/security review materials, map risk themes, and document decision-ready summaries for Cybersecurity review.
• Assist with role-based awareness content, phishing and social-engineering education, AI-threat communications, campaign reporting, and end-user guidance.
• Help maintain Jira/workstream hygiene, dashboards, risk summaries, KPI/KRI inputs, project status updates, and concise leadership-ready reporting.

Benefits

• Practical exposure to how a cybersecurity program operates inside a global commodities and energy trading organization.
• Experience translating technical findings into clear, business-relevant documentation and recommendations.
• Experience working with SOC, vulnerability management, identity, cloud, DevSecOps, data protection, AI governance, and cyber-risk stakeholders.
• A stronger understanding of risk-based decision-making, human-in-the-loop validation, confidentiality, and responsible handling of sensitive information.
• A clear view of cybersecurity career paths and the capabilities expected of analysts who may be considered for future full-time opportunities.

What This Job Offers

• Career Level: Intern