Cybersecurity Internships: 2027 Guide

As of 24 October 2026, our cybersecurity field page lists 501 open cybersecurity internships from 335 companies, and 60 of them were added this week.

This guide covers which employers have cybersecurity internships open, what interns are asked to do, the eligibility terms and pay stated in the postings, and when to apply for summer 2027. The employer details come from postings as listed on Intern Insider on 24 October 2026. Postings change quickly, so the posting you apply through is the final word on its own terms.

Cybersecurity internships open now#

The 501 roles on the field page come from 335 companies, an average of about one and a half roles per company. Among the employers the page shows first, most have one or two roles open. It shows three roles at Sentinel Technologies in Downers Grove, Illinois, and two each at employers including Booz Allen Hamilton, CoStar Group and Hewlett Packard Enterprise.

Other employers on the page today include American Express, Adobe, IBM, Citi, Siemens, The Home Depot, MIT Lincoln Laboratory, Peraton and Gulfstream Aerospace. Many of the rest are not security companies. Utilities, manufacturers, insurers, retailers and health systems all list cybersecurity interns, so searching only for well-known security vendors leaves out many of them.

The field page collects postings that name cybersecurity as a relevant field of study. Our cybersecurity and IT roles page groups postings by the kind of job instead, and it lists 431 open roles from 282 companies as of 24 October 2026. The two pages are built differently, so check both.

Titles to search for#

Cybersecurity internships go by many names. Titles on the field page today include:

• Cyber Security Intern and Cybersecurity Intern, the most common forms.

• SOC Intern, where SOC stands for security operations center, used by Sentinel Technologies.

• Information Security Co-op, used by The Lubrizol Corporation in Wickliffe, Ohio.

• GRC/Cybersecurity Analyst Intern, where GRC stands for governance, risk and compliance, used by Genuine Parts Company.

• Vulnerability Management Intern, used by Health Care Service Corporation.

• Identity Analyst IT Internship, used by Gordon Food Service.

• Threat Detection & Response Engineer Intern, used by CarGurus.

A few roles open to cybersecurity students carry no security word in the title at all. Of the 60 roles the field page shows first, seven have no term such as cyber, security, SOC, threat, vulnerability or identity in the title. They include a Network Intern role at Green Bay Packaging and a Systems Administrator Intern role at PACCAR. Both postings list cybersecurity among the degrees they accept. Searching by field rather than by the word "security" picks these up.

What cybersecurity interns do#

The work depends on the team. Seven postings read on 24 October 2026 show the range.

Three groups show up in these postings. Security operations roles such as MISO and Sentinel Technologies centre on monitoring, logs and incident response. Governance and identity roles such as Genuine Parts Company and Gordon Food Service centre on controls, audits and access management. The Rocket Lab role is a reminder that "security" can also mean physical and program security, and it asks for a different degree.

For a shared vocabulary, NIST publishes the NICE Workforce Framework for Cybersecurity, which it describes as a common language for cybersecurity work and the knowledge and skills needed to do it. NIST says the framework is used for career discovery, including learning about the wide variety of cybersecurity roles.

Eligibility terms to check before you apply#

The postings set different terms, and several are easy to miss if you only read the title.

• Year of study. Sentinel Technologies asks for at least junior standing, and Health Care Service Corporation asks for rising seniors. Rocket Lab and the Federal Reserve Bank of Cleveland ask for at least one semester of school remaining after the internship.

• Grades. The Federal Reserve Bank of Cleveland, Gordon Food Service, Health Care Service Corporation and Rocket Lab each ask for a GPA of 3.0 or higher. The Federal Reserve Bank of Chicago asks for at least 2.75.

• Citizenship and clearance. The CACI Cyber Security Intern role in Springfield, Virginia requires an active TS/SCI clearance and U.S. citizenship. The Cleveland Federal Reserve role requires U.S. citizenship, and the Chicago Federal Reserve role accepts U.S. citizens or permanent residents.

• Visa sponsorship. American Express, MISO, Genuine Parts Company and PACCAR state that sponsorship is not available for the roles we read, and Sentinel Technologies asks for authorization to work in the United States without sponsorship. MISO names OPT and CPT in its statement.

• Location and hours. Most of these roles are on-site. Health Care Service Corporation describes a hybrid role with at least three days a week in the office, and CACI describes its role as part-time. The Sentinel Technologies SOC Intern role asks for a valid driver license and a personal car because it involves travel between locations.

Pay stated in the postings#

Each posting in this guide is listed as paid. Three state a figure:

These figures come from the postings as listed on Intern Insider on 24 October 2026. The other postings in this guide do not state a rate, so confirm pay with the employer before you accept.

Certifications and what postings ask for instead#

None of the open postings we read for this guide lists a certification as a requirement. They ask for a related degree in progress and for working knowledge of specific areas. Booz Allen Hamilton names networking, virtualization, and Linux and Windows systems. MISO names coursework or project experience in log analysis, scripting and incident response. Green Bay Packaging lists CCNA coursework or exposure as a plus, and Health Care Service Corporation lists participation in Capture the Flag or hacking competitions as a plus.

If you do want an entry-level certification, two are common starting points. CompTIA describes Security+ as a cybersecurity certification for core security functions, and says the next version, Security+ V8, is expected on or around 17 November 2026. ISC2 describes its Certified in Cybersecurity (CC) credential as proof of foundational knowledge for an entry or junior level cybersecurity role, and says no experience is needed. Neither is a requirement in the postings above.

Summer 2027 timing and deadlines#

Summer 2027 cybersecurity internships are already posted, and several listings show apply-by dates within weeks. As listed on Intern Insider on 24 October 2026:

• 31 October: both Federal Reserve roles, in Chicago and Cleveland.

• 1 November: CACI.

• 8 November: Sentinel Technologies.

• 15 and 16 November: the American Express cybersecurity analyst postings.

• 30 November: Booz Allen Hamilton and Genuine Parts Company.

• 7 December: MISO, whose role runs from 2 June to 13 August 2027.

Not every role is for summer. Health Care Service Corporation lists its Vulnerability Management Intern role with a rolling term and suggests applying by 1 November. Rocket Lab and PACCAR list Winter 2027 roles, and Rocket Lab asks for 12 consecutive weeks starting in January, February or March 2027.

Postings do not always stay open until their stated deadline. In our analysis of when internship postings really close, about a third of postings were already gone by the time their own deadline arrived. The summer 2027 application timeline shows when each wave of employers tends to open, and the summer 2027 internships page lists open roles across fields.

If you are interested in government work, CISA says one of its student programs is ideal for enrolled students with at least two semesters remaining before graduation, and that it also offers limited unpaid internships for course credit or a third-party stipend.

Cybersecurity internships in Canada#

As of 24 October 2026, the Canadian cybersecurity and IT roles page lists 17 open roles from 15 companies. They include three roles at Pembina Pipeline Corporation in Calgary, a Junior Security Analyst Co-op at BC Pension Corporation in Victoria, an Information Security Intern role at Interac Corp. in Toronto, an Application Security Analyst co-op at Kinaxis in Ottawa, and a Security Analyst Student role at J.D. Irving, Limited in Saint John, New Brunswick. Titles here often use "co-op" or "student" rather than "intern," so search the page rather than a single title.

How to prepare an application#

• Match the posting. MISO names Splunk, Microsoft Defender and SentinelOne, Genuine Parts Company names SIEM, IDS/IPS and vulnerability scanners, and Gordon Food Service describes Okta work. Put the tools and topics a posting names near the top of your resume, where you have used them.

• Show project work. Several postings accept coursework or project experience in place of job experience. Describe a lab, a class project or a competition by what you set up, what you found and what you changed.

• Check eligibility first. Citizenship, clearance, GPA and sponsorship terms differ by employer and can rule out a role before anyone reads your resume.

• Apply to more than one employer. With about one and a half roles per company on the field page, spreading applications across employers is more useful than perfecting one.

• Use the guides. Our tech internship resume guide covers bullet structure, and the cover letter guide covers the letter. For one employer in detail, see the American Express internships guide. If you are also looking at software roles, see the computer science internships guide.

See open cybersecurity internships#

The cybersecurity field page lists open roles by employer, with locations. To compare them with other fields, browse all open internships.