Cybersecurity Intern

Job Description

Cybersecurity Intern | San Diego Association of Governments (SANDAG)

The Tone:
This is a paid internship at SANDAG, located in San Diego, CA. SANDAG is a metropolitan planning organization and a council of governments that unites local decision-makers to tackle regional challenges, improving the quality of life across areas like transportation, housing, and public safety. The Information Technology (IT) department plays a crucial role in supporting this mission by providing secure, innovative, and efficient technology solutions. This internship offers a unique hands-on learning opportunity to contribute to real-world public-sector cybersecurity initiatives, with guidance from senior staff, fostering the development of the next generation of industry professionals.

The TL;DR
• Role: Internship
• Type: One-year opportunity, 25-29 hours per week, Monday – Friday during regular business hours.
• Location: In-person, San Diego, CA
• Pay: $20–$23 hourly
• Team: IT Department, with guidance and mentoring from senior staff.
• Mission: To provide hands-on support for day-to-day security operations, vulnerability assessments, and system security configuration testing within SANDAG’s IT environment, contributing to the overall success and security of the agency.
• Tech Stack: SIEM platforms, Endpoint Protection solutions, Microsoft Azure
• Standards: NIST Cybersecurity Framework, SOC 2, CIS Controls

What You’ll Actually Do
• Penetration Testing: Coordinate internal and external security penetration testing and reporting activities for the agency.
• Risk Assessments: Coordinate third-party cybersecurity risk assessments and assist in internal IT risk assessment activities.
• Security Training: Support the agency’s Cyber/Information Security Training Program, helping to educate staff on security best practices.
• Procedure Development: Assist in the review and update of Information Technology Security processes and procedures to maintain current best practices.
• Incident Management: Monitor and triage security-related tickets and requests, ensuring timely response and resolution.

The Must-Haves
• Background: Student or recent graduate pursuing or holding an undergraduate or graduate degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Experience: Familiarity or experience with security tools such as SIEM platforms and Endpoint Protection solutions, along with an understanding of Cloud Security concepts and platforms like Microsoft Azure.
• Skills: Familiarity with cybersecurity frameworks including NIST Cybersecurity Framework, SOC 2, and CIS Controls; proficient in Microsoft Office applications (Outlook, Word, Excel, PowerPoint, SharePoint); strong analytical and problem-solving abilities; effective interpersonal, written, and oral communication skills.
• Bonus: Demonstrated flexibility and willingness to learn and take initiative in an entry-level Cybersecurity analyst capacity.