Cybersecurity Internship (Summer 2027)

Castleton Commodities International; Stamford (CT); On-site; USD 28,000 - 41,000; Full time

Job summary

Castleton Commodities International offers a Cybersecurity Intern role within its Technology organization to protect networks, systems, data, and business operations. The internship provides hands-on exposure to security operations, vulnerability management, identity and access security, data protection, and AI governance.

You will collaborate with Cybersecurity, Infrastructure, Data Science, DevOps, and other stakeholders in a fast-paced global environment, gaining practical experience through

Qualifications

• Pursuing a bachelor’s or master’s degree in Cybersecurity, Data Science, CS, IT, Engineering, or related field.
• Expected graduation December 2027 or Spring 2028 preferred, though strong candidates may be considered.
• Strong interest in cybersecurity, information security, technology risk, infrastructure security, cloud security, or security operations.
• Foundational understanding of IAM, endpoint and network security, vulnerability management, phishing/social engineering, incident response, and data protection.
• Familiarity with SIEM, Microsoft security tools (Purview), CrowdStrike/EDR concepts, ServiceNow/Jira, scripting (PowerShell/Python), cloud platforms, vulnerability scanners, Git/Bitbucket, container security, DLP/Purview, or AI security concepts.

Responsibilities

• Security operations and threat detection: Assist with alert review, evidence collection, initial triage notes, escalation summaries, and detection-quality improvement under guidance.
• Vulnerability and exposure management: Support tracking, documentation, and prioritization of security findings across endpoints, cloud, external attack surface, and applications, including remediation follow-up and reporting.
• Incident-response readiness: Help maintain incident-response documentation, escalation references, tabletop materials, post-incident action tracking, and lessons-learned templates.
• Identity, access, and privileged access controls: Contribute to documentation and analysis supporting MFA, Conditional Access, PIM/JIT access, service-account ownership, privileged-access workflows, and access-review improvements.
• Data protection and AI security governance: Support policy-to-control mapping, AI tool/use-case inventory, approved-use documentation, data-handling guidance, DLP/Purview planning materials, and safe AI usage communications.
• Cloud, application, and DevSecOps security: Assist with organizing findings and project materials related to secure SDLC, dependency control, secrets detection, container/cloud security, approved software sourcing, and developer security enablement.
• Third-party and supply-chain risk: Help collect and organize vendor/security review materials, map risk themes, and document decision-ready summaries for Cybersecurity review.
• Security awareness and culture: Assist with role-based awareness content, phishing and social-engineering education, AI-threat communications, campaign reporting, and end-user guidance.
• Governance, metrics, and executive reporting: Help maintain Jira/workstream hygiene, dashboards, risk summaries, KPI/KRI inputs, project status updates, and concise leadership-ready reporting.

Skills

Cybersecurity basics

Threat detection

Documentation

Analytical thinking

Communication

Education

Bachelor's or Master's in Cybersecurity/CS/IT/Engineering

Tools

Microsoft Purview

CrowdStrike

EDR concepts

Jira/ServiceNow

PowerShell/Python

Cloud platforms

Job description

Application Deadline: October 9th 12:00 pm EST

The Cybersecurity Intern will support CCI's Technology organization in protecting the firm's networks, systems, applications, identities, data, and business operations. This hands-on internship is designed for a student who wants practical exposure to enterprise cybersecurity while contributing to supervised, meaningful work across security operations, vulnerability and exposure management, identity and access security, data protection, AI security governance, third-party risk, incident-response readiness, and security awareness. The intern will work closely with Cybersecurity, Infrastructure, Data Science, DevOps, Global Client Services, Helpdesk, and business stakeholders in a global, fast-paced environment.

What You Will Work On

• Security operations and threat detection: Assist with alert review, evidence collection, initial triage notes, escalation summaries, and detection-quality improvement under clear analyst guidance.
• Vulnerability and exposure management: Support tracking, documentation, and prioritization of security findings across endpoints, cloud, external attack surface, applications, and legacy/EOS technology risk, including remediation follow-up and reporting.
• Incident-response readiness: Help maintain incident-response documentation, escalation references, tabletop materials, post-incident action tracking, and lessons-learned templates.
• Identity, access, and privileged access controls: Contribute to documentation and analysis supporting MFA, Conditional Access, PIM/JIT access, service-account ownership, privileged-access workflows, and access-review improvements.
• Data protection and AI security governance: Support policy-to-control mapping, AI tool/use-case inventory, approved-use documentation, data-handling guidance, DLP/Purview planning materials, and safe AI usage communications.
• Cloud, application, and DevSecOps security: Assist with organizing findings and project materials related to secure SDLC, dependency control, secrets detection, container/cloud security, approved software sourcing, and developer security enablement.
• Third-party and supply-chain risk: Help collect and organize vendor/security review materials, map risk themes, and document decision-ready summaries for Cybersecurity review.
• Security awareness and culture: Assist with role-based awareness content, phishing and social-engineering education, AI-threat communications, campaign reporting, and end-user guidance.
• Governance, metrics, and executive reporting: Help maintain Jira/workstream hygiene, dashboards, risk summaries, KPI/KRI inputs, project status updates, and concise leadership-ready reporting.

What The Intern Will Gain

• Practical exposure to how a cybersecurity program operates inside a global commodities and energy trading organization.
• Experience translating technical findings into clear, business-relevant documentation and recommendations.
• Experience working with SOC, vulnerability management, identity, cloud, DevSecOps, data protection, AI governance, and cyber-risk stakeholders.
• A stronger understanding of risk-based decision-making, human-in-the-loop validation, confidentiality, and responsible handling of sensitive information.
• A clear view of cybersecurity career paths and the capabilities expected of analysts who may be considered for future full-time opportunities.

Qualifications

• Currently pursuing a bachelor's or master's degree in Cybersecurity, Data Science, Computer Science, Information Systems, Information Technology, Engineering, or related field.
• Expected graduation in December 2027 or Spring 2028 preferred, though strong candidates with adjacent graduation dates may be considered.
• Strong interest in cybersecurity, information security, technology risk, infrastructure security, application security, cloud security, or security operations career with strong emphasis on applied GenAI/agentic AI use in detection, analysis, and response of cyber events and AI process automation.
• Foundational understanding of core cybersecurity concepts such as identity and access management, endpoint security, network security, cloud security, vulnerability management, phishing/social engineering, incident response, and data protection.
• Familiarity with one or more of the following is helpful: SIEM/security monitoring, Microsoft security tools, including Microsoft Purview, CrowdStrike or EDR concepts, ServiceNow/Jira, scripting, PowerShell/Python, cloud platforms, vulnerability scanners, Git/Bitbucket, container security, DLP/Purview, or AI security concepts.
• Strong analytical, investigative, writing, documentation, and organizational skills.
• Ability to handle sensitive information responsibly and follow confidentiality, data handling, and approval requirements.
• Curiosity, creativity, humility, reliability, and willingness to ask questions before acting when the risk or proper process is unclear.
• Ability to communicate clearly with technical and non-technical colleagues and to convert complex issues into concise summaries.
• Experience through coursework, labs, student organizations, certifications, prior internships, capture-the-flag activities, open-source projects, or independent research is a plus.
• Exposure to operational technology, industrial control systems, or commodity/energy infrastructure risk is a plus but not required.

Candidate Profile and Future Opportunity Fit

This role is intended to be valuable both as a summer learning experience and as a potential early-career talent pipeline. Successful interns will demonstrate sound judgment, good documentation habits, careful handling of confidential information, intellectual curiosity, follow-through, and the ability to learn from feedback.

The intern will not be expected to act as an independent security analyst or approve security decisions. Work will be supervised, evidence-based, and aligned to CCI process and policy expectations.

Because some interns may later be considered for future roles, the internship should include structured feedback, exposure to multiple cybersecurity domains, and at least one tangible work product that demonstrates analytical quality, communication skill, and ownership.