Cybersecurity Threat & Vulnerability Analyst – Intern/Co-op Conversion

Jobtailor; Charlotte (NC); On-site; USD 28,000 - 41,000; Full time

Job summary

Duke Energy is seeking an internship/co-op in Cyber Threat Analysis to identify and eradicate cyber threats across the energy environment. You will analyze threat data and share actionable intel with teams and leadership.

The role requires a cybersecurity-focused degree, hands-on threat research, and scripting skills in Python or PowerShell, with strong communication and analytical abilities to thrive in a fast-paced setting.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or a related field
• Duke Energy internship or co-op experience
• Experience researching and assessing cyber threats and vulnerabilities
• Knowledge of attack methods and techniques, including DDoS, brute force, and spoofing
• Knowledge of cyber intelligence and information collection capabilities and repositories
• Knowledge of cybersecurity domains, security practices, Cyber Kill Chain methodology, and MITRE ATT&CK Framework
• Knowledge of telecommunications fundamentals, networking, and routing
• Understanding of TCP/IP communications and network-level DNS, HTTP, and SMB protocols and applications
• Knowledge of intelligence disciplines and internal tactics to anticipate or emulate threat capabilities and actions
• Ability to utilize multiple intelligence sources across intelligence disciplines
• Windows and UNIX/Linux command-line scripting and programming experience, including Python and PowerShell
• Strong written and verbal communication skills
• Ability to create complex technical reports and provide briefings to staff and management
• Ability to work effectively in a dynamic, fast-paced environment
• Ability to research independently, multitask, and meet tight deadlines
• Ability to develop and maintain relationships with internal and external business partners
• Experience writing and editing technical documentation and operational procedures
• Experience developing and improving work processes
• Effective problem-solving and analytical skills
• Knowledge of Duke Energy's cybersecurity policies
• Commitment to training, self-study, and maintaining technical cybersecurity proficiency
• Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future

Responsibilities

• Identify, analyze, prioritize, and eradicate cyber threats and vulnerabilities across the Duke Energy environment
• Analyze threat information and disseminate it to appropriate parties for action
• Collaborate with peers, internal and external teams, and management
• Support tools for vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis
• Follow processes and procedures defined by Cybersecurity leadership and the Threat & Vulnerability Management team

Skills

Threat Analysis

Vulnerability Management

Python Programming

PowerShell Scripting

Unix/Linux Scripting

Communication Skills

Analytical Skills

Education

Bachelor's degree in Cybersecurity, Information Technology, or a related field

Tools

Vulnerability Scanning Tools

Configuration Monitoring Tools

Open Source Intelligence Tools

Job description

• Identify, analyze, prioritize, and eradicate cyber threats and vulnerabilities across the Duke Energy environment
• Analyze threat information and disseminate it to appropriate parties for action
• Collaborate with peers, internal and external teams, and management
• Support tools for vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis
• Follow processes and procedures defined by Cybersecurity leadership and the Threat & Vulnerability Management team

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field
• Duke Energy internship or co-op experience
• Experience researching and assessing cyber threats and vulnerabilities
• Knowledge of attack methods and techniques, including DDoS, brute force, and spoofing
• Knowledge of cyber intelligence and information collection capabilities and repositories
• Knowledge of cybersecurity domains, security practices, Cyber Kill Chain methodology, and MITRE ATT&CK Framework
• Knowledge of telecommunications fundamentals, networking, and routing
• Understanding of TCP/IP communications and network-level DNS, HTTP, and SMB protocols and applications
• Knowledge of intelligence disciplines and internal tactics to anticipate or emulate threat capabilities and actions
• Ability to utilize multiple intelligence sources across intelligence disciplines
• Windows and UNIX/Linux command-line scripting and programming experience, including Python and PowerShell
• Strong written and verbal communication skills
• Ability to create complex technical reports and provide briefings to staff and management
• Ability to work effectively in a dynamic, fast-paced environment
• Ability to research independently, multitask, and meet tight deadlines
• Ability to develop and maintain relationships with internal and external business partners
• Experience writing and editing technical documentation and operational procedures
• Experience developing and improving work processes
• Effective problem-solving and analytical skills
• Knowledge of Duke Energy's cybersecurity policies
• Commitment to training, self-study, and maintaining technical cybersecurity proficiency
• Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future

Core Competencies

Demonstrates expertise in identifying and mitigating cyber threats and vulnerabilities, utilizing knowledge of cybersecurity frameworks such as MITRE ATT&CK and Cyber Kill Chain. Proficient in technical report writing and effective communication with stakeholders.

Highest-signal resume keywords

• Cybersecurity Degree
• Threat Analysis
• Vulnerability Management
• Python Programming
• Technical Documentation

ATS Optimization Keywords

Hard Skills

• Cyber Threat Research
• Vulnerability Scanning
• DDoS Attack Knowledge
• TCP/IP Communications
• UNIX/Linux Scripting
• PowerShell Scripting
• Cyber Kill Chain Methodology
• MITRE ATT&CK Framework
• Networking Fundamentals
• Technical Report Writing

Soft Skills

• Strong Communication Skills
• Problem-Solving Skills
• Analytical Skills
• Relationship Building
• Multitasking Ability

Industry Keywords

• Cybersecurity Policies
• Threat Intelligence
• Information Technology
• Telecommunications Fundamentals
• Internal Tactics

Tools & Technologies

• Vulnerability Scanning Tools
• Configuration Monitoring Tools
• Open Source Intelligence Tools