Cybersecurity Analyst Intern

Leidos; Clearfield (UT); On-site; USD 48,000 - 87,000; Full time

Job summary

Leidos is seeking motivated cybersecurity students for a Summer 2027 Internship Program as a Cybersecurity Analyst Intern on the Hill AFB, UT site. You will be embedded with SOC analysts, gaining hands-on experience in threat analysis, incident response, and documentation within a DoD‑oriented security environment.

You will triage alerts, analyze network traffic, review threat intel, and shadow incident response activities, contributing to DISN security operations. This internship requires U.S.

Qualifications

• Currently pursuing a degree in Cybersecurity, Computer Science, Computer Engineering, or Information Technology.

Responsibilities

• Triage and analyze security alerts from SIEM, IDS/IPS, and NetFlow to identify potential malicious activity.
• Assist senior analysts in network traffic analysis and correlate security events using raw packet data and sensor outputs.
• Shadow incident response efforts and learn containment, eradication, and recovery activities.
• Review open-source threat intel to identify indicators of compromise and improve detection capabilities.
• Conduct preliminary analysis of potential incidents by reviewing suspicious connections and logs.
• Create clear, concise technical documentation and incident reports for leadership and partners.

Education

Pursuing degree in Cybersecurity/Computer Science/Computer Engineering/Information Technology

Tools

SIEM

IDS/IPS

NetFlow

TCP/IP

MITRE ATT&CK

Job description

Description

Leidos, a leading defense, intelligence, and technology company, is seeking motivated and aspiring cybersecurity students for our Summer 2027 Internship Program (Starts May 2027). As a Cybersecurity Analyst Intern, you will join our Digital Sector on the Global Solutions Management – Operations II (GSM-O II) contract at Hill AFB, UT. This is a unique opportunity to gain hands‑on experience in a real‑world security environment, contributing to the operations, sustainment, and active defense of the Defense Information System Network (DISN) in support of the Defense Information Systems Agency (DISA).

Your Opportunity:

Are you ready to move beyond the classroom and hunt for real‑world threats? As a member of our Hill AFB cybersecurity team, you will be embedded directly with seasoned Security Operations Center (SOC) analysts who protect and defend critical DoD infrastructure. You will gain exposure to enterprise‑grade security tools, threat intelligence analysis, and incident response strategies, gaining hands‑on cyber operations experience that truly matters.

What You’ll Do (Potential Projects & Learning Opportunities)

• Learn to triage and analyze security alerts from various sources (SIEM, IDS/IPS, NetFlow) to identify potential malicious activity on customer networks.

• Assist senior analysts in performing network traffic analysis and correlating actionable security events using raw packet data and custom sensor outputs.

• Shadow incident response efforts, learning how the team coordinates resources during containment, eradication, and recovery activities.

• Gain exposure to cyber threat intelligence by reviewing open‑source feeds and learning how to identify Indicators of Compromise (IOCs) to improve detection capabilities.

• Practice conducting preliminary analysis of potential security incidents, such as investigating suspicious network connections and reviewing system logs for anomalous activity.

• Help create clear, concise technical documentation and incident reports for leadership and mission partners.

What You’ll Bring (Required)

• Citizenship & Clearance: Must be a U.S. citizen and eligible to obtain a DoD Secret security clearance.

• Education: Currently pursuing a degree in a relevant field such as Cybersecurity, Computer Science, Computer Engineering, or Information Technology.

• Technical Foundation: A solid understanding of TCP/IP protocols, common networking ports (e.g., 80, 443, 21, 22), the OSI model, and principles of defense‑in‑depth.

• Cyber Frameworks: Academic knowledge of the Cyber Kill Chain methodology and/or the MITRE ATT&CK framework, and basic malware analysis concepts (static/dynamic analysis).

• Analytical Mindset: A proactive, eager‑to‑learn attitude with the ability to analyze security alerts and identify potential false positives.

• Teamwork: A collaborative attitude with strong written and verbal communication skills.

• Location: This internship is based on‑site at Hill AFB, UT. All work must be performed on site – no teleworking opportunities. Candidates must have their own reliable transportation to and from the facility at Hill AFB, UT.

What We Want (Desired)

• Certifications: Obtaining a CompTIA Security+ or CySA+ certification (or any certification that aligns with DoD 8570 IAT Level II) before the start date is strongly encouraged.

• Hands‑On Experience: Prior experience from home labs (e.g., VirusTotal, basic sandboxing), Capture the Flag (CTF) competitions, or class projects involving network defense.

• Familiarity with:

• Enterprise SIEM platforms like Splunk or Elastic.

• Unix/Linux command line environments and Windows system administration.

• Basic scripting and programming (e.g., Python, Bash).

• Computer Network Defense (CND) domains: Protect, Detect, Respond, and Sustain.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting

August 26, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $48,100.00 - $86,950.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.