Cybersecurity Intern
Listed on 2026-10-17
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Reports to:
Senior Director – Enterprise Security
Location:
On-site — Memphis, TN
Duration:
May 24 – August 6, 2027 (~11 weeks, full-time, 40 hours/week)
Status:
Draft — 2027 project assignments subject to finalization before start date
Highline Warren is a private-label manufacturer and distributor of automotive aftermarket consumables, operating roughly 27 manufacturing and distribution facilities across North America. Our Enterprise Security team owns enterprise cybersecurity, OT/ICS security across our blending and packaging plants, and cyber risk and governance.
The Cybersecurity Intern will work directly alongside our Enterprise Security team on the build-out of our security program. This is a hands-on role focused on real program work — documentation, inventory, risk and vendor management support, and metrics. The intern will gain exposure to how a security program is built and matured inside a private-equity-held manufacturer, including governance, third-party risk, and the distinct challenges of securing an industrial/plant environment.
Key Responsibilities & DutiesThe intern will support the Enterprise Security team across a rotating mix of the following, scaled to skill level and business priorities during the internship window:
Security documentation:
Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.
Third-party risk management (TPRM):
Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses.
Vulnerability management support:
Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences.
Assessment & audit support:
Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).
Framework research & mapping:
Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.
Security awareness:
Support the awareness program — phishing-simulation logistics, training content, and internal communications.
Specific scope will be confirmed closer to the internship, but the intern is expected to support the following initiatives:
Third-Party Risk Management (TPRM) — supporting vendor onboarding, platform data entry, and evidence collection.
Cloud security sensors and cloud posture management (CSPM) — supporting sensor coverage tracking and posture-finding review.
AI agent / non-human identities (NHI) security and alerting — supporting inventory, monitoring, and alert triage for machine and agent identities.
Zero trust / secure access — supporting documentation and rollout tracking for secure-access initiatives.
Required QualificationsCurrently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).
Strong written communication and documentation skills; able to translate technical detail into clear, organized material.
Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams).
Demonstrated reliability and sound judgment in handling confidential and sensitive information.
Able to work on-site in Memphis, TN for the full internship period.
Preferred QualificationsFamiliarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443).
Exposure to scripting or automation (e.g., Python, Power Shell).
Interest in cloud security, identity, OT/ICS security, or manufacturing environments.
Progress toward a relevant certification (e.g., CompTIA Security+).
Familiarity with ticketing or project tools (e.g., Jira).
What You'll GainDirect experience building security capabilities in an emerging-maturity program.
Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.
Practical experience with third-party risk management, cloud security, and identity.
Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.
Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).