Cybersecurity Internship Winter 2027 - Systems and Organizations Controls (SOC)

Tevora•Fairfax, VA

38d•Onsite

About The Position

The Cybersecurity Consultant Development Program is an immersive paid-training internship program designed to help participants strengthen the technical and professional skills needed to enter the workforce as a full-time Information Security Associate. The program focuses on the Systems and Organization Controls (SOC) practice area, where interns will perform comprehensive SOC assessments, support remediation of security control deficiencies, and provide Augmented Staff services by working directly within client organizations. The Developing Consultant (DC) role is part of the client-facing consulting team, responsible for project delivery activities in areas like Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually develop their skills through personal development and industry participation.

Requirements

Basic familiarity with networking concepts like firewalls, routers, switches, and DNS.
Basic familiarity with computer troubleshooting and server systems administration.
Basic familiarity with business planning and accounting.
Multi-tasking and time management skills.
Dynamic, enthusiastic, and excellent interpersonal skills.
Excellent writing both expository and technical documentation.
Intermediate working knowledge of Excel and Word.
Self-starter who likes to tinker and learn on their own.
Bachelor's Degree from an accredited 4-year university (or Military equivalent) or currently enrolled at an accredited 4-year university (or Military equivalent).
Eligibility to work in the United States.
Required to work onsite at our Fairfax, VA, or Irvine, CA, location.

Nice To Haves

Any knowledge of compliance frameworks is a plus.
IT, Cybersecurity, and Information Security certifications a plus.

Responsibilities

Perform comprehensive System and Organization Controls (SOC) assessments against service provider organizations.
Support in the remediation of security control deficiencies through the development of policies and providing business process re-engineering recommendations.
Provide Augmented Staff services, directly working within client organizations as a supporting team member to aid in the maintenance of security and compliance programs.
Develop technical and business skills required to perform billable work on projects.
Learn about industry-standard certifications and their benefits.
Learn about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001.
Observe implementations of Enterprise Security Solutions.
Observe and help with internal and external penetration testing and social engineering projects.
Plan technical execution plans to meet business requirements.
Gather requirements to complete execution plans.
Execute on previously designed plans.
Document execution procedures and provide professional insights into the technologies involved.
Assist Consultants with client engagements.