Intern, Cybersecurity

Rockwell Automation•Chelmsford, MA

1d•$20 - $32•Hybrid

About The Position

Rockwell Automation is seeking a cybersecurity intern to help improve the cybersecurity posture of SIC products. The position is based in Chelmsford, Massachusetts, or Milwaukee, Wisconsin, and follows a hybrid policy requiring employees to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have an off-site business obligation. The intern will support cybersecurity risk assessments, EU Cyber Resilience Act readiness, threat modeling, secure product development, and vulnerability and software-supply-chain analysis. The role also involves industrial control system security and protocol testing, developing Python automation and REST API integrations, prototyping AI-assisted assessment workflows, and supporting Linux-based security test environments and tooling. Candidates must be pursuing a bachelor's or advanced degree at an accredited college or university and be legally authorized to work in the United States. The stated base salary range is $20–$32 per hour; actual pay depends on skills, education, and experience.

Requirements

Pursuing a bachelor's or advanced degree from an accredited college or university.
Legal authorization to work in the United States; Rockwell Automation will not sponsor employment visas, now or in the future.

Nice To Haves

Bachelor's degree in Computer Science, Engineering, or Cybersecurity.
Minimum cumulative GPA of 2.75 on a 4.0 scale.
Located within 50 miles of the Chelmsford, Massachusetts, or Milwaukee, Wisconsin, office.
Expected graduation date of December 2025 or later.
Met Rockwell Automation at an on-campus event, national recruiting event, Rockwell Automation-hosted event, or targeted recruiting campaign.
Two years of software programming experience.
Cybersecurity fundamentals skills.
Coursework in C/C++, assembly language, and digital logic.
Participation in cyber competitions.
Experience with a logic analyzer, oscilloscope, and voltage meter.
Experience with Kali Linux and Metasploit.
Familiarity with OSINT.
Experience with Python and REST APIs.

Responsibilities

Perform and support cybersecurity risk assessments for connected industrial control products, edge devices, and integrated solutions.
Support technical readiness activities for the EU Cyber Resilience Act, including developing audit-ready assessment reports and compliance evidence and maintaining traceability among requirements, threats, controls, and verification artifacts.
Support risk disposition, exception management, and remediation tracking workflows.
Participate in architectural threat-modeling sessions across product lifecycles and help assess hardware, firmware, software, and communication interfaces to identify assets, trust boundaries, and attack paths.
Help engineering teams evaluate and resolve product security vulnerabilities.
Test industrial protocols, including EtherNet/IP, Common Industrial Protocol (CIP), and Modbus; assist with test harness execution, packet-level analysis, and security verification in dedicated lab or testbed environments.
Support vulnerability assessments and remediation prioritization, and correlate Software Bills of Materials (SBOMs) with known vulnerabilities, component trees, and device configurations.
Build automated scripts and workflows for vulnerability evaluation, reporting, and SBOM data aggregation.
Design Python-based tools, scripts, and pipelines to automate evidence collection, data normalization, metrics generation, and assessment reporting.
Develop REST API integrations to query and correlate data across engineering and security platforms, including ThreatModeler, Jama Connect, Jira/Jira Align, SAP, and vulnerability/SBOM repositories.
Parse, transform, and validate structured data formats including JSON, XML, and YAML.
Support prototyping AI-assisted security assessment capabilities, including RAG pipelines, system prompt libraries, and Model Context Protocol (MCP) tool connectors using engineering specifications.
Help implement deterministic validation checks and auditability controls so AI outputs reference ground-truth engineering evidence.
Support development and administration of Linux-based product security test environments and toolchains; use Git for version control, code reviews, and CI/CD workflow automation, with exposure to Docker and Ansible.