Cybersecurity Intern: Year-round

Cybersecurity employees are a team of innovative professionals with a passion for doing what SMUD does best – keeping the lights on for our community, and we’re looking for people who want to operate in an inclusive atmosphere where collaboration and continuous improvement are our core to how we operate.

The cybersecurity intern position will provide a STEM student an opportunity to contribute their skills and knowledge to SMUD while gaining valuable cybersecurity work experience.

SMUD's cybersecurity department is continually striving to improve SMUD's cybersecurity risk posture and protect our people, processes, and technology through an organization-wide risk management approach. Our cybersecurity policies and procedures provide a framework to safeguard information and systems from unauthorized access, use, disclosure, disruption, modification, and destruction.

The cybersecurity intern may be assigned projects and tasks that include (but are not limited to):

• Assisting SMUD in shaping its cybersecurity risk assessment process
• Supporting system-level and supply chain cybersecurity risk assessments
• Performing technical vulnerability research to determine applicability based on impacted hardware and/or software
• Evaluating vulnerability likelihood and impact to determine technical mitigation strategies
• Assisting in developing security control baselines based on the confidentiality, integrity, and availability requirements of system stakeholders
• Refining SMUD's cybersecurity supply chain risk evaluation process
• Evaluating cybersecurity policy exception requests and helping determine the cybersecurity risk posed to the organization
• Assisting with the development of cybersecurity risk template documentation such as technical security assessment plans
• Performing research into hardening measures for a wide‑variety of technology sets
• Working with our Cybersecurity Awareness, Training, and Education team to help create timely and relevant awareness communications based on recurring or emerging threat intelligence.

The cybersecurity intern will gain experience and exposure to cybersecurity policies and processes as well as real-world cybersecurity risks.

Under staff direction, incumbents in this classification are full‑time students in a Science, Technology, Engineering or Math program who perform research and analytical tasks for projects and assignments that utilize specific and acquired academic skills and knowledge in alignment with their educational disciplines.

The work performed in this classification calls for regular application of analytical and independent research skills. Work is closely related to the employee’s academic major in Science, Technology, Engineering or Mathematics.

• Performs tasks of an analytical or research nature for suitable projects or ongoing assignments which call for specific acquired academic skills and knowledge in Science, Technology, Engineering or Math.
• May locate sources of information; collect and organize data.
• Makes computations and analyzes data for degree of confidence and for alternative courses of action.
• May develop computer programs relating to assignments and may code material for established programs.
• May develop written, graphical and/or oral reports.
• May assist staff analysts and technical personnel by performing elements of their work under close supervision.

Registration as a full‑time student (minimum of 12 units) at an accredited college or university in a declared curriculum with a Science, Technology, Engineering or Mathematics (STEM) emphasis that will provide the specific skills and knowledge that will contribute to available work assignments.

• Major:
  Cybersecurity or other technology related majors (e.g. Computer Science, Management Information Systems, etc.)
• Junior or Senior standing
• Has taken or is presently enrolled in cybersecurity related courses
• Has technical writing skills
• Proficient with modern computer/networking technologies
• Capable of performing independent technical research and presenting their findings to help shape recommendations
• Familiar with NIST Cybersecurity…