Guardian Summer Intern, Digital & Technology, Cybersecurity

2027 Guardian Summer Intern, Digital & Technology - Cybersecurity

Our 2027 Summer Internship Program is a paid 10‑week learning experience where you will be immersed in the daily environment of a thriving global financial services company. You will gain invaluable industry and organizational knowledge through daily business interactions and job assignments, in addition to engaging in projects that directly affect our business, interact with senior leaders in conversational settings, and network with employees and interns across our offices.

This 10‑week internship provides you with realistic experiences and information of what it is like to work  all roles, teams are assigned mid‑spring. Doing so offers the ability to assign program participants to real‑time, business‑critical needs.

The internship program will run from Thursday, May 27, 2027
- Friday, August 6, 2027. We review applications on a rolling basis, and we encourage you to apply as soon as you are ready. The application window will close on Friday, November 13th, 2026, at 11:59PM ET or when role(s) have been filled, whichever comes first.

• A current junior (graduation date of December 2027 or May 2028) or current sophomore (graduation date of December 2028 or May 2029) who is fueled by collaboration, able to listen and make quick decisions and thrive in a goal‑oriented environment.

• Bethlehem, PA
• New York, NY
• Holmdel, NJ

• Desire to be curious and analyze anomalies
• Desire & passion to learn and grow in cybersecurity
• Customer‑focused orientation
• Interest in developing detections to identify potentially malicious activities and focus on investigating or understanding what happened and why
• Excellent organization skills, highly detail‑oriented, strong on workflow process, ability to manage, and follow up on multiple competing priorities effectively
• Interest in cybersecurity governance and compliance activities, including documenting processes, supporting risk assessments, tracking remediation actions, developing metrics, control monitoring, and assisting with compliance activities

• Familiarity with operating systems, applications, and security concepts in at least two of the following domains:
  Network/Perimeter Security, including Next‑Gen firewalls, intrusion prevention systems, proxies, and Web Application firewalls;
  Enterprise Endpoint (host‑based) Security; DLP and Secure Data Transmission, Storage, and Access
• Identity Access Management, including detection creation, forensic investigation or incident response, event log aggregation, searching, and analysis
• Familiarity with security architectures and operating & troubleshooting principles of Microsoft Windows and Linux operating systems
• Knowledge of TCP/IP protocol stack, including routing, network address translation, TCP/UDP connectivity, and application‑level protocols: HTTP, SMTP, DNS, etc.
• Familiarity with cybersecurity governance and compliance concepts, including security policies and standards, risk assessments, control testing, and security awareness activities

• Be a self‑starter – someone who enjoys “rolling up their sleeves and getting things done”, has high energy, strong work ethic, displays the ability to work independently, and is creative
• Monitor & analyze events from various SOC intake sources (SIEM, ticketing system, email, chat, phone), conducting initial event discovery, triage, and response as per the Standard Operating Procedure, while also applying the knowledge of modern threat landscape and industry best practices and standards in more than one of the following channels:
  Incident Response & Digital Forensics;
  Security Orchestration & Automation (SOAR);
  Ide…