Cybersecurity Intern - Summer 2027

Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. Based in New York City, Carter Threat Labs also trains client staff and runs simulated phishing campaigns.

Overview

Remote internship on the Governance and Compliance team. You will work on our own systems only, with written permission and a clear scope for any testing. You can work from home anywhere in the US. We have no office requirement. Please make sure you have a quiet place to work and a solid internet connection.

What you'll do

• Update security policies and runbooks in Confluence
• Write clear findings with severity, impact and steps to fix
• Research new CVEs that affect our stack and summarise them for the team
• Track open vulnerabilities in Jira and follow up with owners on fixes
• Triage phishing emails reported by staff and update block lists
• Monitor dependency alerts from Dependabot and Snyk
• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope

What we're looking for

• Based in the US for the duration of the internship
• Currently enrolled in a bachelor's or master's program, graduating between December 2027 and June 2028
• Available 40 hours a week for the full internship
• Hands-on practice through TryHackMe, Hack The Box or college labs
• Some scripting in Python or Bash
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in between December 2027 and June 2028
• Willing to complete a basic background check before access is granted
• Comfortable on the Linux command line
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls

What you'll learn

• How audit evidence, policies and technical controls fit together
• Writing findings that engineers can fix without a long back-and-forth

Duration: 10-12 weeks

Start date: Summer 2027

Stipend: $39.50-$42.00 per hour

What we offer

• Intern events and speaker sessions (virtual)
• Learning and development stipend
• Paid company holidays
• Return offer opportunities
• Paid sick time

Duration: 10-12 weeks. Start: Summer 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Carter Threat Labs.