Cyber Analyst Intern - Summer

Job Title:

Cyber Analyst Intern - Summer 2027

Job Category:
Intern/Co-op

Time Type:
Part time

Minimum Clearance Required to Start:
Public Trust

Employee Type:
Part-Time On-Call

Percentage of

Travel Required:

None

Type of Travel:
None

* * *

CACI is excited to announce paid internship opportunities for Cyber Security Analysts to support our NASA Consolidated Applications Platforms Services (NCAPS) contract. As a successful candidate, you will conduct information security risk assessments in accordance with the NIST Risk Management Framework for new projects and associated infrastructure and applications. You will assess the effectiveness of internal security controls, participate in the SDLC as both a risk assessor and advisor for best practices, and maintain knowledge of security and privacy laws, industry best practices, and technological changes to advise on potential impacts.

Additionally, you will serve as a Security Technical Liaison to project and functional teams and support FISMA audit requirements. Join us in this dynamic role and contribute to the security of NASA’s critical applications.

• Maintain Application Security Plan (ASP)
• Manage the completion of the risk assessment
• Create Plan of Action & Milestone (POAM)
• Manage Application vulnerability mitigation strategy
• Manage Application contingency plan
• Conduct Firewall Rule Analysis
• Conduct Continuous Monitoring of applications, databases, & systems
• Manage asset inventory
• Perform Compliance monitoring
• Perform File Integrity monitoring
• Perform Log Management
• Provide Monthly reporting and metrics
• Perform Incident/vulnerability response duties
• Conduct Vulnerability Scanning analysis & mitigation tracking
• Conduct Application scanning analysis & mitigation tracking
• Communicate with Security Operations Center (SOC)
• Communicate with Marshall Incident Response Team (MIRT)

• Must be currently enrolled and pursuing an undergraduate or graduate degree in Cyber Security or related area.
• Understanding of what an Information Security role is.
• Working knowledge of the NIST RMF and implementation of NIST SP 800-53 IA Controls.
• Knowledge on performing risk assessments (e.g., evaluate threats, vulnerabilities, likelihood, and impact) and identifying mitigating controls.
• System security planning
• Incident response and handling
• Knowledge with various vulnerability assessment tools such as Nessus, HP Web Inspect, HP Fortify, Burpsuite, etc.
• Broad technology background; distributed systems (Linux, Solaris, Windows, enterprise applications (such as databases, SAP, etc.) and application development and architecture (SDLC).
• Understanding of mitigating controls at the systems, network, and application level
• Ability to work both in a team construct and independently.
• Ability to build and maintain constructive working relationships with a diverse community (in and outside of technology) is critical; ability to effectively communicate (both written and verbal) with and influence both technical and non-technical audiences.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

• Firewall ruleset analysis
• Web application scanning
• Web application & system vulnerability assessment
• Web application static code analysis
• SAP access management security
• Security in agile environments
• Minimum of CompTIA Security+ certification is a plus.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

CACI values the unique…