Intern, Cybersecurity

Rockwell Automation•Chelmsford, MA

3d•Hybrid

About The Position

Rockwell Automation is seeking a cybersecurity intern to help improve the cybersecurity posture of SIC products. The role is based in Chelmsford, Massachusetts, or Milwaukee, Wisconsin, and supports product security across connected industrial control products, edge devices, and integrated solutions. The intern will work under the guidance of senior engineers on risk assessments, secure product development, industrial control system security, vulnerability and software supply chain analysis, automation, AI-assisted assessment workflows, and test infrastructure. The position follows a hybrid policy: employees are expected to work at a Rockwell location on Mondays, Tuesdays, and Thursdays unless they have a business obligation elsewhere. The stated base salary range is $20–$32 per hour; actual pay depends on skills, education, and experience.

Requirements

Pursuing a bachelor's or advanced degree at an accredited college or university.
Legal authorization to work in the United States; the company will not sponsor employment visas now or in the future.

Nice To Haves

Bachelor’s degree in Computer Science, Engineering, or Cybersecurity.
Minimum cumulative GPA of 2.75 on a 4.0 scale.
Located within 50 miles commuting distance of the Chelmsford, Massachusetts, or Milwaukee, Wisconsin, office.
Expected graduation date of December 2025 or later.
Met Rockwell Automation at an on-campus or national recruiting event, a Rockwell-hosted event, or a targeted recruiting campaign.
Two years of software programming experience.
Knowledge of cybersecurity fundamentals.
Coursework in C/C++, assembly language, and digital logic.
Participation in cyber competitions.
Experience with a logic analyzer, oscilloscope, and voltage meter.
Experience with Kali Linux or Metasploit.
Familiarity with OSINT.
Experience with Python and REST APIs.

Responsibilities

Help conduct product cybersecurity risk assessments for connected industrial control products, edge devices, and integrated solutions.
Support technical readiness for the EU Cyber Resilience Act by developing audit-ready assessment reports and compliance evidence, and maintaining traceability among requirements, threats, controls, and verification artifacts.
Support risk disposition, exception management, and remediation tracking.
Participate in architectural threat-modeling sessions across product lifecycles, and assess hardware, firmware, software, and communication interfaces to identify assets, trust boundaries, and attack paths.
Help engineering teams evaluate and resolve product security vulnerabilities.
Work with OT and ICS architectures, PLC environments, network segmentation, and industrial protocols including EtherNet/IP, CIP, and Modbus; assist with test harness execution, packet-level analysis, and security verification in lab/testbed environments.
Assist with CVE analysis and remediation prioritization; correlate SBOMs with known vulnerabilities, component trees, and device configurations.
Build scripts and workflows to improve vulnerability evaluation, reporting, and SBOM data aggregation.
Design Python-based tools, scripts, and pipelines for evidence collection, data normalization, metrics generation, and assessment reporting.
Develop REST API integrations to query and correlate data across engineering and security platforms, including ThreatModeler, Jama Connect, Jira/Jira Align, SAP, and vulnerability/SBOM repositories.
Parse, transform, and validate JSON, XML, and YAML data.
Support prototyping AI-assisted security assessments, including RAG pipelines, system prompt libraries, and MCP tool connectors based on engineering specifications.
Help implement deterministic validation and auditability controls so AI outputs reference ground-truth engineering evidence.
Support development and administration of Linux-based product security test environments and toolchains.
Use Git for version control and code reviews, and support CI/CD workflow automation; gain exposure to Docker and Ansible.