[Hiring] Summer 2027 Vulnerability Management Analyst Intern @Highmark Health

Role Description

The Summer 2027 Vulnerability Management Analyst Undergraduate Internship provides students with an opportunity to gain meaningful, hands-on experience supporting an enterprise Information Security program. This internship is designed to develop the next generation of cybersecurity professionals through direct exposure to:

• Vulnerability identification
• Technical validation
• Security data analysis
• Remediation management
• Automation
• Enterprise risk reduction

As a member of the Security Assurance and Vulnerability Management team, the intern will work alongside experienced Information Security professionals to help:

• Identify, validate, analyze, prioritize, and track security vulnerabilities across enterprise applications, systems, infrastructure, and cloud environments
• Gain practical experience understanding the complete vulnerability management lifecycle, from initial discovery and technical validation through asset ownership identification, risk assessment, remediation, and closure

The intern will work with vulnerability and asset data from multiple sources to:

• Establish technical evidence
• Identify affected systems
• Determine ownership
• Monitor remediation progress

The role will also provide exposure to:

• Vulnerability management platforms
• Microsoft security technologies
• Cloud security tools
• External attack-surface discovery
• Security reporting and analytics

In addition to core vulnerability management activities, interns will have opportunities to use tools such as:

• Excel
• PowerShell
• Python

Through mentorship and collaboration with infrastructure, application, cloud, security operations, and other technology teams, participants will develop a broad understanding of how enterprise cybersecurity teams work together to identify vulnerabilities and reduce organizational risk.

Qualifications

• Full or part-time enrollment in an accredited college or university baccalaureate program
• Currently pursuing a degree in Cybersecurity, Information Security, or a related technology discipline (preferred)

Requirements

• Communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems
• Under supervision, provide entry-level professional services as appropriate to the day-to-day operating objectives of the area
• Undertake and/or participate in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization
• Participate in the planning and implementation of unit projects and initiatives within area of expertise and ability
• Conduct research and reporting inclusive of recommendations or alternative proposals for action as specifically requested by management
• Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit
• Perform miscellaneous job-related duties as assigned

Company Description