Cybersecurity Internship (Summer 2027)

Castleton Commodities International, LLC; Stamford (CT); On-site; USD 28,000 - 55,000; Part time

Job summary

Castleton Commodities International, LLC is seeking a Cybersecurity Intern to support a global technology function. The role provides hands-on exposure across security operations, vulnerability management, identity and access security, data protection, and AI governance, with mentorship and real-world projects.

You will work with SOC, DevSecOps, cloud, and risk stakeholders to translate technical findings into business-ready documentation and risk-based recommendations.

Qualifications

• Bachelor's or Master’s degree in cybersecurity, data science, CS, information systems, IT, or engineering.
• Strong interest in cybersecurity, information security, technology risk, and security operations with GenAI/agentic AI focus.
• Foundational understanding of IAM, endpoint/network security, cloud security, vulnerability management, phishing, incident response, and data protection.

Responsibilities

• Security operations and threat detection: assist with alert review, evidence collection, initial triage notes, escalation summaries, and detection-quality improvement.
• Vulnerability and exposure management: track, document, and prioritize security findings across endpoints, cloud, external attack surface, applications, and legacy EOS tech; include remediation follow-up and reporting.
• Incident-response readiness: help maintain incident-response documentation, escalation references, tabletop materials, post-incident action tracking, and lessons-learned templates.
• Identity and access controls: contribute to MFA, Conditional Access, PIM/JIT access, service-account ownership, and access-review improvements.
• Data protection and AI governance: support policy-to-control mapping, AI tool/inventory, data-handling guidance, and safe AI usage communications.
• DevSecOps security: organize findings and project materials for secure SDLC, dependency control, secrets detection, container/security, and developer security enablement.
• Third-party risk: assist with vendor security review materials and risk theme mapping for leadership-ready summaries.
• Security awareness and culture: help develop awareness content, phishing education, and campaign reporting.

Skills

Analytical

Communication

Documentation

Cross-functional teamwork

Education

Bachelor's or Master's in Cybersecurity/CS/IT

Expected graduation Dec 2027 or Spring 2028

Tools

Microsoft Purview

CrowdStrike

EDR concepts

ServiceNow/Jira

PowerShell/Python

Git/Bitbucket

Cloud platforms

Vulnerability scanners

DLP/Purview

AI security concepts

Job description

Role Overview

The Cybersecurity Intern will support CCI’s Technology organization in protecting the firm’s networks, systems, applications, identities, data, and business operations. This hands-on internship is designed for a student who wants practical exposure to enterprise cybersecurity while contributing to supervised, meaningful work across security operations, vulnerability and exposure management, identity and access security, data protection, AI security governance, third‑party risk, incident‑response readiness, and security awareness. The intern will work closely with Cybersecurity, Infrastructure, Data Science, DevOps, Global Client Services, Helpdesk, and business stakeholders in a global, fast-paced environment.

What You Will Work On

• Security operations and threat detection: Assist with alert review, evidence collection, initial triage notes, escalation summaries, and detection-quality improvement under clear analyst guidance.
• Vulnerability and exposure management: Support tracking, documentation, and prioritization of security findings across endpoints, cloud, external attack surface, applications, and legacy/EOS technology risk, including remediation follow-up and reporting.
• Incident-response readiness: Help maintain incident-response documentation, escalation references, tabletop materials, post-incident action tracking, and lessons-learned templates.
• Identity, access, and privileged access controls: Contribute to documentation and analysis supporting MFA, Conditional Access, PIM/JIT access, service-account ownership, privileged-access workflows, and access-review improvements.
• Data protection and AI security governance: Support policy-to-control mapping, AI tool/use-case inventory, approved-use documentation, data-handling guidance, DLP/Purview planning materials, and safe AI usage communications.
• Cloud, application, and DevSecOps security: Assist with organizing findings and project materials related to secure SDLC, dependency control, secrets detection, container/cloud security, approved software sourcing, and developer security enablement.
• Third-party and supply-chain risk: Help collect and organize vendor/security review materials, map risk themes, and document decision-ready summaries for Cybersecurity review.
• Security awareness and culture: Assist with role-based awareness content, phishing and social-engineering education, AI-threat communications, campaign reporting, and end-user guidance.
• Governance, metrics, and executive reporting: Help maintain Jira/workstream hygiene, dashboards, risk summaries, KPI/KRI inputs, project status updates, and concise leadership-ready reporting.

What the Intern Will Gain

• Practical exposure to how a cybersecurity program operates inside a global commodities and energy trading organization.
• Experience translating technical findings into clear, business-relevant documentation and recommendations.
• Experience working with SOC, vulnerability management, identity, cloud, DevSecOps, data protection, AI governance, and cyber-risk stakeholders.
• A stronger understanding of risk-based decision-making, human-in-the-loop validation, confidentiality, and responsible handling of sensitive information.
• A clear view of cybersecurity career paths and the capabilities expected of analysts who may be considered for future full-time opportunities.

Qualifications

• Currently pursuing a bachelor’s or master’s degree in Cybersecurity, Data Science, Computer Science, Information Systems, Information Technology, Engineering, or related field.
• Expected graduation in December 2027 or Spring 2028 preferred, though strong candidates with adjacent graduation dates may be considered.
• Strong interest in cybersecurity, information security, technology risk, infrastructure security, application security, cloud security, or security operations career with strong emphasis on applied GenAI/agentic AI use in detection, analysis, and response of cyber events and AI process automation.
• Foundational understanding of core cybersecurity concepts such as identity and access management, endpoint security, network security, cloud security, vulnerability management, phishing/social engineering, incident response, and data protection.
• Familiarity with one or more of the following is helpful: SIEM/security monitoring, Microsoft security tools, including Microsoft Purview, CrowdStrike or EDR concepts, ServiceNow/Jira, scripting, PowerShell/Python, cloud platforms, vulnerability scanners, Git/Bitbucket, container security, DLP/Purview, or AI security concepts.
• Strong analytical, investigative, writing, documentation, and organizational skills.
• Ability to handle sensitive information responsibly and follow confidentiality, data handling, and approval requirements.
• Curiosity, creativity, humility, reliability, and willingness to ask questions before acting when the risk or proper process is unclear.
• Ability to communicate clearly with technical and non‑technical colleagues and to convert complex issues into concise summaries.
• Experience through coursework, labs, student organizations, certifications, prior internships, capture-the-flag activities, open-source projects, or independent research is a plus.
• Exposure to operational technology, industrial control systems, or commodity/energy infrastructure risk is a plus but not required.

Candidate Profile and Future Opportunity Fit

This role is intended to be valuable both as a summer learning experience and as a potential early-career talent pipeline. Successful interns will demonstrate sound judgment, good documentation habits, careful handling of confidential information, intellectual curiosity, follow-through, and the ability to learn from feedback. The intern will not be expected to act as an independent security analyst or approve security decisions. Work will be supervised, evidence-based, and aligned to CCI process and policy expectations. Because some interns may later be considered for future roles, the internship should include structured feedback, exposure to multiple cybersecurity domains, and at least one tangible work product that demonstrates analytical quality, communication skill, and ownership.

Castleton Commodities International is a leading global energy commodities merchant and infrastructure asset investor. As a trader, CCI deploys capital on a proprietary basis in the physical and financial commodity markets, providing the Company with market insights and access. As a strategic investor and developer, CCI leverages its market expertise, operations capabilities, and industry knowledge to invest in, and develop, select commodity infrastructure assets. This fully integrated platform has generated strong risk‑adjusted returns for our investors since our formation.