Description

Title: Summer Intern – Cybersecurity Starting Pay: Undergraduate rate - $20 per hour; Graduate rate - $24 per hour Departmental Mission Statement: Supporting access to justice through the effective use of technology. Partnering with Judges and Court Staff to use technology to make it easier and faster to administer justice while building a culture that values transparency, collaboration, inclusivity, and continuous improvement. Notes: This is an hybrid internship based in Boston Position Summary: In this role, you will learn about and spend your time working on several major focus areas of cybersecurity including incident management, vulnerability management, risk management, and awareness and education. • Provide tier one support for cybersecurity incidents, requests, alerts, and events by conducting initial analysis for troubleshooting, investigation and/or fulfillment. • Utilize tools to assist with the analysis for troubleshooting, investigation, and fulfillment processes. • Manage incident and request fulfillment tickets in the enterprise service management platform by creating, updating, assigning, and resolving tickets in a timely manner. • Collaborate with the cybersecurity, infrastructure, and service delivery teams to triage tickets and issues requiring resolution and/or escalation. • Learn, understand, and assist with generating Security Information and Event Management (SIEM) queries for anomalous activity identification and investigation. • Create, review, and update internal cybersecurity technical documentation related to policies, standards, controls, processes, and procedures. • Create, review, and update user-facing informational and educational resources that is consumable and understandable to a non-technical audience on the enterprise intranet used by all judges and employees. • Conduct vulnerability scanning and security assessments in support of risk management and audit activities. • Capture data, provide input, and assist in the generation of key metrics and reports to help in decision-making to reduce the overall cybersecurity risk to the Judicial Branch. • Assist with rollout of new cybersecurity services and update of existing security services. • Assist with the administration of the phishing simulation program by running campaigns, building, and reviewing email templates, identifying, and assigning remedial training. • Assist with development of security awareness and education training program to reduce cybersecurity risk from actions taken by judges and employees and to further strengthen the security culture. Minimum Requirements: o Working towards a Bachelor’s Degree (or graduate degree, etc.) from an accredited college or university. Preferred Qualifications: o Technical Experience  Experience in an IT environment.  Experience in an information security environment.  Understanding of technology and how it plays a role in organizations.  Experience in troubleshooting incidents and problems while working with teams to find solutions.  Experience with a ticketing system.  Knowledge about the Center for Internet Security (CIS) controls, National Institute of Standards (NIST) cybersecurity best practices, MITRE ATT&CK framework.  Knowledge about information/data classification.  Knowledge about personal identifiable information (PII), personal health information (PHI), and Health Information Portability and Accountability Act (HIPAA).  Strong interest in the Cybersecurity field  Relevant internship or work experience in the field o Non-Technical Experience  Excellent communication skills, including verbal and written communications.  Excellent collaboration skills.  Excellent customer service orientation.  Self-starter with ability to work independently.

Role and Responsibilities

• n this role, you will learn about and spend your time working on several major focus areas of cybersecurity including incident management, vulnerability management, risk management, and awareness and education. • Provide tier one support for cybersecurity incidents, requests, alerts, and events by conducting initial analysis for troubleshooting, investigation and/or fulfillment. • Utilize tools to assist with the analysis for troubleshooting, investigation, and fulfillment processes. • Manage incident and request fulfillment tickets in the enterprise service management platform by creating, updating, assigning, and resolving tickets in a timely manner. • Collaborate with the cybersecurity, infrastructure, and service delivery teams to triage tickets and issues requiring resolution and/or escalation. • Learn, understand, and assist with generating Security Information and Event Management (SIEM) queries for anomalous activity identification and investigation. • Create, review, and update internal cybersecurity technical documentation related to policies, standards, controls, processes, and procedures. • Create, review, and update user-facing informational and educational resources that is consumable and understandable to a non-technical audience on the enterprise intranet used by all judges and employees. • Conduct vulnerability scanning and security assessments in support of risk management and audit activities. • Capture data, provide input, and assist in the generation of key metrics and reports to help in decision-making to reduce the overall cybersecurity risk to the Judicial Branch. • Assist with rollout of new cybersecurity services and update of existing security services. • Assist with the administration of the phishing simulation program by running campaigns, building, and reviewing email templates, identifying, and assigning remedial training. • Assist with development of security awareness and education training program to reduce cybersecurity risk from actions taken by judges and employees and to further strengthen the security culture.