Cybersecurity Internship Summer 2026 - Systems and Organizations Controls (SOC)

Tevora•Irvine, CA

61d•$27 - $27•Onsite

About The Position

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you. What's the role? We are pleased to announce we are opening our Consultant Development Program our program is an immersive paid-training program designed to help you strengthen the technical and professional skills you'll need to enter the workforce as a full-time Information Security Associate. Our anticipated start date for this cohort will be from June 3rd - August 11th. Tevora University & Mentorship Program

Requirements

The Developing Consultant (DC) is an up-and-coming part of the client-facing consulting team. DCs are responsible for helping in conducting project delivery activities based on their selected Tevora Information Security practice areas, including Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually develop their skills through personal development and Information Security industry participation.
Networking concepts like firewalls, routers, switches, and DNS
Computer troubleshooting and server systems administration
Business planning and accounting
Multi-tasking and time management skills
Dynamic, enthusiastic, and excellent interpersonal skills
Excellent writing both expository and technical documentation
Intermediate working knowledge of Excel and Word
Self-starter who likes to tinker and learn on their own
Bachelor's Degree from an accredited 4-year university (or Military equivalent) or Currently enrolled at an accredited 4-year university (or Military equivalent)
Eligibility to work in the United States.
Required to work onsite at our Fairfax, VA, or Irvine, CA, location.

Nice To Haves

Any knowledge of compliance frameworks is a plus
IT, Cybersecurity, and Information Security certifications a plus

Responsibilities

Research emerging information security risk, privacy, and compliance topics for white papers and knowledge sharing
Analysis of client organizations to investigate and identify information security risks and security control vulnerabilities
Assist with researching risk treatment and vulnerability remediation for client reports
Joining interviews with various clients' subject matter experts to assist in data collection
Assist in template and procedure creation for Compliance and Risk solutions
Assist in report writing and delivery of client reports
Learning about National and International standards, frameworks, and legislations that govern the industry, such as ISO 27000, SOC, HIPAA, PCI DSS, GDPR, and NIST.
Perform comprehensive System and Organization Controls (SOC) assessments against service provider organizations across a multitude of industries, providing assurance of reliability and protection of all forms of sensitive data.
Support in the remediation of security control deficiencies through the development of policies and providing business process re-engineering recommendations to ensure compliance with SOC.
Provide Augmented Staff services, directly working within client organizations as a supporting team member to aid in the maintenance of security and compliance programs.
Developing technical and business skills required to perform billable work on projects as quickly as possible
Learning about industry-standard certifications and their benefits
Learning about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001
Observing Implementations of Enterprise Security Solutions
Observing and helping with internal and external penetration testing and social engineering projects