About the role#
The Cyber Incident Response Analyst Intern will work within the Cyber Fusion Center to help detect, investigate, and respond to cybersecurity threats. You will focus on translating technical response activities into clear, repeatable processes. This role is designed for students seeking hands-on experience in digital forensics, threat operations, and cybersecurity program development.
What you'll do#
- Support Cyber Incident Response Analysts during active cyber incident investigations.
- Develop, review, and maintain standard operating procedures, workflows, and process documentation.
- Create visual process maps, workflow diagrams, and response flowcharts for Cyber Fusion Center operations.
- Assist in planning, documenting, and supporting cyber incident tabletop exercises.
- Document threat actor tactics, techniques, and procedures (TTPs) along with indicators of compromise (IOCs).
What you'll need#
- Current enrollment in a Bachelor's or Master's degree program in Cybersecurity, Information Security, Computer Science, Information Technology, Digital Forensics, or Cyber Operations.
- Completion of at least one year of undergraduate coursework or sophomore standing at minimum.
- A cumulative GPA of 2.8 or higher.
- Strong written communication and technical documentation skills.
Location & details#
- Location: District of Columbia, United States.
- Term: Fall 2026.
- Modality: On-site.
- Compensation: $18.00 to $35.00 per hour, plus Amtrak rail pass privileges and one PTO day per academic year.
- Employment status: Full-time.
About Amtrak
Amtrak provides intercity passenger rail transportation across the United States and into three Canadian provinces. Founded in 1971, the company manages a network covering 21,000 route miles and serves over 500 destinations. It operates more than 300 trains daily with a workforce of over 13,000 employees. The headquarters is located in Washington, District of Columbia.
How to get in at Amtrak
Applying early is your best strategy for securing an internship at Amtrak because recruiters review applications as they arrive. Intern Insider sends an instant alert the moment a role matching your target is published anywhere, so you apply among the first and get seen before the pile grows. You gain a significant advantage by acting while others are still waiting for job boards to refresh. Reaching out to the right person is often more effective than submitting an application into a general queue. Intern Insider surfaces the recruiters behind Amtrak roles so you can reach out directly to ask about the position or a referral. This direct approach materially improves your response rates compared to standard online submissions.


