Cybersecurity Intern

Highline Aftermarket; Memphis (TN); On-site; USD 17,000 - 28,000; Full time

Job summary

Highline Aftermarket in Memphis, TN is offering a cybersecurity internship for May 24 – August 6, 2027 (about 11 weeks, full-time). You will work with Enterprise Security on building out our security program, including documentation, risk and vendor management, and governance exposure in an industrial/plant environment.

You'll gain hands-on experience across policy development, third-party risk, vulnerability management, and framework mapping (NIST CSF 2.0, CIS Controls), with mentorship and a

Qualifications

• Pursuing a bachelor's (or advanced) degree in Cybersecurity, IT, CS, or related field.
• Foundational understanding of core cybersecurity concepts.
• Strong written communication and documentation skills.
• Proficiency with Microsoft 365.
• Ability to work on-site in Memphis, TN for full internship.

Responsibilities

• Draft, format, and maintain policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.
• Assist in third-party risk management data entry and tracking.
• Pull and organize vulnerability scan output and track remediation.
• Support evidence collection for framework validation and maturity assessments.
• Map controls against NIST CSF 2.0 and CIS Controls.
• Support security awareness activities.

Skills

Cybersecurity fundamentals

Documentation

Written communication

Microsoft 365

Education

Pursuing Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft 365

Job description

Reports to: Senior Director – Enterprise Security

Location: On-site — Memphis, TN

Duration: May 24 – August 6, 2027 (~11 weeks, full-time, 40 hours/week)

Status: Draft — 2027 project assignments subject to finalization before start date

Position Summary

Highline Warren is a private-label manufacturer and distributor of automotive aftermarket consumables, operating roughly 27 manufacturing and distribution facilities across North America. Our Enterprise Security team owns enterprise cybersecurity, OT/ICS security across our blending and packaging plants, and cyber risk and governance.

The Cybersecurity Intern will work directly alongside our Enterprise Security team on the build-out of our security program. This is a hands-on role focused on real program work — documentation, inventory, risk and vendor management support, and metrics. The intern will gain exposure to how a security program is built and matured inside a private-equity-held manufacturer, including governance, third-party risk, and the distinct challenges of securing an industrial/plant environment.

Key Responsibilities & Duties

The intern will support the Enterprise Security team across a rotating mix of the following, scaled to skill level and business priorities during the internship window:

Security documentation: Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.

Third-party risk management (TPRM): Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses.

Vulnerability management support: Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences.

Assessment & audit support: Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).

Framework research & mapping: Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.

Security awareness: Support the awareness program — phishing-simulation logistics, training content, and internal communications.

Potential Project Focus Areas

Specific scope will be confirmed closer to the internship, but the intern is expected to support the following initiatives:

Third-Party Risk Management (TPRM) — supporting vendor onboarding, platform data entry, and evidence collection.

Cloud security sensors and cloud posture management (CSPM) — supporting sensor coverage tracking and posture-finding review.

AI agent / non-human identities (NHI) security and alerting — supporting inventory, monitoring, and alert triage for machine and agent identities.

Zero trust / secure access — supporting documentation and rollout tracking for secure-access initiatives.

Required Qualifications

Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).

Strong written communication and documentation skills; able to translate technical detail into clear, organized material.

Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams).

Demonstrated reliability and sound judgment in handling confidential and sensitive information.

Able to work on-site in Memphis, TN for the full internship period.

Preferred Qualifications

Familiarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443).

Exposure to scripting or automation (e.g., Python, PowerShell).

Interest in cloud security, identity, OT/ICS security, or manufacturing environments.

Progress toward a relevant certification (e.g., CompTIA Security+).

Familiarity with ticketing or project tools (e.g., Jira).

What You'll Gain

Direct experience building security capabilities in an emerging-maturity program.

Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.

Practical experience with third-party risk management, cloud security, and identity.

Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.

Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.