Risk Advisory Intern – Technical Advisory - Remote (Mexico)

Echelon Risk + Cyber

1d • Remote

About The Position

Echelon Risk + Cyber is seeking a university student in their final three semesters for a Risk Advisory Proactive Incident Response internship. The intern will support client engagements that help organizations prepare for cyber incidents and learn how incident response readiness is developed, tested, and improved. The role contributes to plans, playbooks, exercises, assessments, and documentation, while learning how incident response connects with risk, compliance, and business continuity. The intern will collaborate with colleagues across advisory, defensive, and offensive security teams and gain experience on real client engagements.

This internship is part of the Summer 2027 Internship Program and runs from June 7, 2027, through August 12, 2027. Interns are expected to work approximately 20–25 hours per week. Compensation is $15–$20 USD per hour, depending on relevant experience. The position is remote and requires authorization to work in Mexico without current or future visa sponsorship. Applicants must submit resumes in English.

Requirements

• Be a university student in the final three semesters of a degree program.
• Currently pursue a degree in IT, Cybersecurity, Computer Science, Business, or a related field.
• Have a strong interest in incident response and cyber preparedness, and a foundational understanding of cybersecurity principles.
• Have advanced English proficiency (C1/C2), including verbal and written communication and the ability to write clear, step-by-step procedures.
• Have strong organizational skills and the ability to manage multiple projects and priorities.
• Demonstrate attention to detail and strong analytical and problem-solving skills.
• Be curious about how attacks unfold and how organizations detect and contain them.
• Have excellent communication skills and the ability to tailor messages for technical and executive audiences.
• Be comfortable working independently in a remote-first, multinational team.
• Aspire to work in the cybersecurity industry within the next two years.
• Be available to work at least 20 hours per week during 8 AM–5 PM CST, Monday through Friday.
• Be authorized to work in Mexico without current or future visa sponsorship.
• Submit a resume in English.

Nice To Haves

• Familiarity with incident response lifecycles such as NIST SP 800-61, the MITRE ATT&CK framework, or the Cyber Kill Chain.
• Exposure to security operations concepts such as SIEM, EDR, log analysis, or threat intelligence.
• Internship, academic project, competition (such as a CTF or cyber defense exercise), or coursework related to incident response, digital forensics, or business continuity.
• Exposure to security or risk frameworks such as NIST, ISO 27001, CIS, or SOC 2.
• Interest in presenting or facilitating and comfort using PowerPoint and Word for exercise materials.

Responsibilities

• Support the development and review of incident response plans, playbooks, and runbooks aligned with NIST SP 800-61 and client-specific requirements.
• Help design tabletop exercises by researching scenarios and preparing injects, discussion questions, and facilitator materials.
• Take notes during exercises and help prepare after-action reports documenting observations, gaps, and prioritized recommendations.
• Research threat actors and attack techniques and help map exercise scenarios to the MITRE ATT&CK framework.
• Assist with incident response readiness assessments, including reviews of existing plans, roles, escalation paths, and communication procedures.
• Help draft and update contact lists, communication templates, severity matrices, and decision flowcharts.
• Support business continuity and disaster recovery documentation, including business impact analysis inputs and recovery procedures.
• Learn how security tools such as EDR and SIEM support detection and response so client plans reflect operational practices.
• Gather and organize client evidence related to incident response and continuity controls across frameworks such as NIST CSF, ISO 27001, SOC 2, HIPAA, and CMMC.
• Shadow consultants on client calls, exercise planning sessions, and facilitated exercises.
• Participate in internal team meetings to learn engagement planning, risk discussions, and advisory approaches.
• Support thought leadership efforts such as blog content, threat briefings, and internal knowledge sharing.

Benefits

• Hands-on experience working alongside industry experts on real client engagements.
• Mentorship and guidance from seasoned professionals.
• An innovative environment that values new ideas and creative problem-solving.
• Career advancement exposure to cybersecurity and risk management practices.
• A collaborative and supportive community centered on teamwork and knowledge-sharing.

What This Job Offers

• Job Type: Part-time
• Career Level: Intern
• Education Level: No Education Listed