Cybersecurity Intern

Job description

**EVOCS OVERVIEW** EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions. As an IT consulting firm, we work with our clients to understand their needs, identify the right technologies, and deliver solutions that improve performance and support their business objectives. Today, EVOCS is a trusted technology partner to a growing number of organizations and industry leaders. Our team combines technical expertise, business understanding, and a commitment to quality to deliver effective solutions and build lasting client relationships based on responsiveness, consistency, and results. # **Cybersecurity Intern** *Long-term internship, 30+ hours per week | Remote, United States | Reports to the Director of Cybersecurity | Path to full-time* ## **🎯 Role Overview** EVOCS is looking for a cybersecurity intern to work alongside our security team on real work. Not shadowing, not busywork. You will be given actual tasks, with oversight, and the expectation that you learn fast and take on more. This is a long-term internship, not a summer placement, and it is built as a path to a full-time role. If you do well, we want to hire you. You will work directly with the Director of Cybersecurity, who will supervise your work and be the person you learn from. ## **🧩 What You Will Work On** - **Microsoft security.** Configuring, hardening, testing, and documenting across the Microsoft Cloud and Endpoint security stack (Azure, Microsoft 365, Entra, Defender, Intune, Purview). Reviewing settings against benchmarks and finding what is misconfigured. - **Threat and vulnerability research.** Stay on top of new advisories, CVEs, and attack techniques, work out which ones actually matter to our environment and our clients, and write short, clear briefs on what you find. Not AI slop! - **Building and automating.** Write scripts and small tools that remove manual work: pulling data, generating reports, collecting evidence, checking configurations. If you build something that saves the team hours, that is a win here. AI-assisted coding is welcome, provided you understand what your code does. - **Compliance support.** Control evidence collection, access reviews, vendor reviews, asset inventory reconciliation, and keeping documentation and ownership mapping current. - **Engagement support.** Helping prepare material behind our client security work: research, data organization, and first-pass analysis. You will not be client-facing, but you will see how real engagements are run. - **Security tooling.** Evaluating, standing up, testing, and documenting security tools, and helping decide whether they are worth keeping. ## **🧠 What You Will Bring** - Foundational security knowledge from coursework, certifications (Security+ or similar), or self-study. No professional experience required. - Comfortable across Windows, macOS, and Linux, and willing to dig into unfamiliar tools without being walked through them. - Some scripting ability (PowerShell, Python, or equivalent) or clear evidence you can pick it up quickly. - Clear written communication. A lot of this work is taking something messy and explaining it plainly. - Accuracy and follow-through. Much of this work is only useful if it is right and finished. - Curiosity, and the willingness to ask a question rather than guess. Guessing quietly is the one habit that causes problems here. - Available 30+ hours per week on an ongoing basis, based in the United States and authorized to work without sponsorship. ## **🛠️ Show Us You Actually Care About This** You will not have much professional experience, and that is fine. What you have built on your own time is the best evidence we have, and here it counts more than coursework. - A home lab: a SIEM you stood up, a detection lab, a small AD domain you attacked, anything you broke and rebuilt. - A GitHub profile: scripts, parsers, automation, tools you wrote because something annoyed you. - CTFs, HackTheBox, TryHackMe, or writeups explaining something technical to other people. - Anything else that shows this is a genuine interest rather than a job search: a blog, a project, a talk, a tool nobody asked you for. ***It does not need to be polished. Send links and tell us what you learned building it.*** ## **⭐ Nice to Have** - Any exposure to Microsoft 365, Entra, and Azure. - Familiarity with security or compliance frameworks (NIST CSF, CIS Benchmarks, ISO 27001, SOC 2). - Experience with a SIEM, EDR, or vulnerability scanner, including free and open source ones. - An interest in how AI is being applied to security work, and to building things generally. ## **🎁 What You Will Get Out of It** - Direct mentorship from the Director of Cybersecurity, with your work reviewed rather than rubber-stamped. - Hands-on experience across the Microsoft security stack, compliance operations, and live client security work. - Real projects you can point to, including anything you build. - A genuine path to a full-time role. That is the intent of this internship, not a footnote. ## **📋 The Details** - Type: long-term paid internship, 30+ hours per week, with the intent to convert to full-time. - Location: remote, United States. - System access: assigned progressively as you demonstrate judgment, starting with supervised work. #LI-DNP Pay Range for jobs in the US. Pay Range $16—$24 USD **👥 Our Values** We are privileged to serve our loyal customer base in our mission to build lasting relationships with our clients based on trust and mutual success. We strive to deliver exceptional quality and consistency through a white-glove approach. By empowering businesses with tailored solutions and insights, we help them achieve their goals and navigate the ever-evolving tech landscape. *The values we live by:* - Customer-centric Solutions - Innovation & Excellence - Integrity & Transparency - Data-driven Decision Making **📝 Need to Know** The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.