Summer 2027 Consulting Internship - Cybersecurity

Consulting Intern
- Cybersecurity

Berry Dunn's Government Assurance Practice Group (GAPG) is seeking a Consulting Intern
- Cybersecurity to join our Information Technology Security (ITS) practice. Berry Dunn provides independent cybersecurity consulting that help organizations address complex business, operational, and technology challenges.

As a Cybersecurity Intern, you will gain hands-on exposure to cybersecurity consulting by supporting experienced team members with client engagements, documentation review, research, analysis, and assessment activities. Responsibilities may include assisting with cybersecurity risk assessments, penetration testing, vulnerability assessments, security control evaluations, and the preparation of client-facing deliverables under the guidance of Berry Dunn ITS consultants.

The ideal candidate is pursuing a degree in cybersecurity, information technology, computer science, information systems, or a related field and has an interest in developing technical, analytical, communication, and consulting skills. This internship provides an opportunity to learn about cybersecurity frameworks, technical assessment methodologies, client service, and project delivery within a collaborative professional services environment.

This fulltime internship will be based out of our Portland, ME office. The internship dates are as follows:
May 25, 2027 to August 6, 2027.

In order to be considered, you must include your unofficial academic transcription with your application.

• Support cybersecurity consulting engagements by assisting team members with research, documentation review, data gathering, and analysis related to client environments, applications, networks, operating systems, and cloud-based platforms.
• Learn how cybersecurity risks are identified, analyzed, and communicated by assisting with the development of practical, risk-based observations and recommendations under the guidance of experienced consultants.
• Assist with penetration testing, vulnerability assessments, security reviews, compliance assessments, and technical testing activities by helping prepare materials, organize results, document observations, and support follow-up analysis.
• Contribute to client-facing reports, presentations, executive summaries, and technical deliverables by drafting content, formatting materials, summarizing information, and incorporating feedback from project team members.
• Support project coordination activities, including maintaining project documentation repositories, tracking assigned tasks, preparing meeting materials, and helping organize client-provided information.
• Develop an understanding of cybersecurity consulting methodologies by participating in project activities, observing client interactions, and learning how assessment, compliance, risk management, and advisory services are delivered.
• Gain exposure to cybersecurity frameworks and standards such as NIST, CIS Controls, PCI DSS, and other industry-recognized frameworks through supervised project work and internal learning activities.
• Learn about a variety of client environments, technologies, industries, and operating models, including on-premises, hybrid, and cloud-based infrastructures.
• Communicate professionally with project team members and, when appropriate, client stakeholders while demonstrating curiosity, responsiveness, and a collaborative approach to assigned work.
• Collaborate with team members across client engagements and participate in staff meetings, project discussions, training sessions, and knowledge-sharing activities.
• Build technical, analytical, communication, and consulting skills through hands-on experience, mentorship, self-directed learning, internal training, and exposure to professional development opportunities.
• Stay curious about emerging cybersecurity threats, technology trends, cloud security concepts, and industry best practices, and apply that learning to support project teams and client service delivery.

• Enrolled in an undergraduate or graduate degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Foundational understanding of cybersecurity principles, networking concepts, operating systems, enterprise IT environments, and cloud-based services, with a desire to continue building technical knowledge through hands-on experience and mentorship.
• Coursework, lab experience, internship experience, or personal projects related to Windows, Linux, networking, cybersecurity, system administration, vulnerability management, or security configuration concepts.
• Exposure to cybersecurity frameworks, testing concepts, or tools such as OWASP, NIST, CIS Controls, vulnerability scanning tools, security labs, or capture-the-flag exercises is helpful, but not required.
• Ability to manage assigned tasks, meet deadlines, ask thoughtful questions, and…