[Hiring] Vulnerability Management Intern – Cybersecurity @CSC Cboe Services Company

Role Description

The Vulnerability Management Intern position will provide exposure to the various functions, tools, and activities focusing on reducing Cboe’s attack surface by way of vulnerability management.

• Act on vulnerability findings, spearheading technical communication to resolving teams professionally and accurately
• Assist with day-to-day operational tasks, such as:
  • Scan result review
  • IP asset configuration management (CMDB) accuracy improvement
  • Scan issue resolution
  • Reporting of vulnerabilities to system owners from scan results leveraging a ticketing system
• Remain aware of breaking vulnerability news stories by leveraging various threat intelligence feeds
• Document/improve vulnerability management procedures
• Identify and act upon automation opportunities that could include API programming and leveraging AI and LLM tooling available in-house
• Collaborate with vulnerability management teammates in other time zones, which may include a small number of meetings off-hours, typically in the evening
• Perform additional duties and assignments as requested

Qualifications

• Currently enrolled in a Bachelor’s or Master’s program in Information Security, Cyber Security, Computer Science, Engineering or equivalent exposure and experience related to these fields
• Should not be scheduled to graduate before December of the internship year
• Understands security vulnerabilities in software and systems and comprehends the potential impact if they are left unaddressed
• Eager to learn quickly and able to communicate clearly and professionally in English
• Base knowledge of security concepts, versed in TCP/IP, common ports/services, and overall networking concepts such as routing, switching and firewalls
• Able to perform basic administrative tasks on both Linux and Windows based systems
• Working knowledge of Microsoft Office products including Excel, Word and PowerPoint

Requirements

• Experience in Python and/or PowerShell automating tasks leveraging calls to REST or Graph API’s
• Hands-on experience doing patching and remediation in a corporate environment to enable authoritative communication with remediation teams
• Familiarity with vulnerability scanners such as Nexpose, Qualys, or Tenable, or Cloud Security Posture Management tooling
• Experience automating with Excel, PowerAutomate, Sigma, or Snowflake

Benefits

• Competitive compensation
• Flexible, hybrid work environment, 3 days in office, 2 days remote, per week
• 2:1 401(k) match, up to 8% match immediately upon hire
• Daily complimentary in-office lunch from local restaurants
• Endless free coffee and snacks to fuel your workday
• Monthly in-office networking events and happy hours
• Associate Resource Groups (ARGs) and affinity groups for support and community building