Cybersecurity Intern

Highline Warren, LLC; Memphis (TN); On-site; USD 10,911,000 - 13,335,000; Full time

Job summary

Highline Warren is seeking a Cybersecurity Intern to work with the Enterprise Security team in Memphis, TN for an 11-week, full-time internship. The role emphasizes hands-on program work—documentation, risk and vendor management support, and metrics—to help build and mature a private-equity-backed security program in an industrial environment.

You will gain exposure to governance, third-party risk, cloud security, and identity within a manufacturing setting, and receive mentorship from seasoned

Qualifications

• Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).
• Strong written communication and documentation skills; able to translate technical detail into clear, organized material.

Responsibilities

• Assist in drafting, formatting, and maintaining security policies, standards, procedures, and runbooks under supervision.
• Help gather and normalize vendor lists, enter and track vendor data in the TPRM platform, monitor risk-rating alerts.
• Pull and organize scan output, track remediation status, and build clear summary views for technical and non-technical audiences.
• Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).
• Conduct research and map controls against frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.
• Support the awareness program - phishing simulations, training content, and internal communications.

Skills

Cybersecurity basics

Written communication

Microsoft 365 proficiency

Reliability & discretion

On-site Memphis

Education

Pursuing bachelor’s in Cybersecurity/IT/CS

Job description

Career Opportunities with Highline Warren

A great place to work.

Careers and Highline Warren

Share with friends or Subscribe!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Reports to: Senior Director - Enterprise Security

Location: On-site - Memphis, TN

Duration: May 24 - August 6, 2027 (~11 weeks, full-time, 40 hours/week)

Status: Draft - 2027 project assignments subject to finalization before start date

Position Summary

Highline Warren is a private-label manufacturer and distributor of automotive aftermarket consumables, operating roughly 27 manufacturing and distribution facilities across North America. Our Enterprise Security team owns enterprise cybersecurity, OT/ICS security across our blending and packaging plants, and cyber risk and governance.

The Cybersecurity Intern will work directly alongside our Enterprise Security team on the build-out of our security program. This is a hands-on role focused on real program work - documentation, inventory, risk and vendor management support, and metrics. The intern will gain exposure to how a security program is built and matured inside a private-equity-held manufacturer, including governance, third-party risk, and the distinct challenges of securing an industrial/plant environment.

Key Responsibilities & Duties

The intern will support the Enterprise Security team across a rotating mix of the following, scaled to skill level and business priorities during the internship window:

• Security documentation: Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.
• Third-party risk management (TPRM): Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses.
• Vulnerability management support: Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences.
• Assessment & audit support: Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).
• Framework research & mapping: Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.
• Security awareness: Support the awareness program - phishing-simulation logistics, training content, and internal communications.

Potential Project Focus Areas

Specific scope will be confirmed closer to the internship, but the intern is expected to support the following initiatives:

• Third-Party Risk Management (TPRM) - supporting vendor onboarding, platform data entry, and evidence collection.
• Cloud security sensors and cloud posture management (CSPM) - supporting sensor coverage tracking and posture-finding review.
• AI agent / non-human identities (NHI) security and alerting - supporting inventory, monitoring, and alert triage for machine and agent identities.
• Zero trust / secure access - supporting documentation and rollout tracking for secure-access initiatives.

Required Qualifications

• Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).
• Strong written communication and documentation skills; able to translate technical detail into clear, organized material.
• Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams).
• Demonstrated reliability and sound judgment in handling confidential and sensitive information.
• Able to work on-site in Memphis, TN for the full internship period.

Preferred Qualifications

• Familiarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443).
• Exposure to scripting or automation (e.g., Python, PowerShell).
• Interest in cloud security, identity, OT/ICS security, or manufacturing environments.
• Progress toward a relevant certification (e.g., CompTIA Security+).
• Familiarity with ticketing or project tools (e.g., Jira).

What You’ll Gain

• Direct experience building security capabilities in an emerging-maturity program.
• Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.
• Practical experience with third-party risk management, cloud security, and identity.
• Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.
• Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.