Information System Security Officer (ISSO) Intern

Rolls-Royce plc; Indianapolis (IN); On-site; USD 25,000 - 39,000; Full time

Job summary

Rolls-Royce Corporation is seeking an Information System Security Officer (ISSO) Intern for a 12-week Summer program in Indianapolis, IN. You will work with the cybersecurity team to support RMF processes, assist ISSMs/ISOs, and gain hands-on experience in a cleared defense environment.

You'll help update SSPs, track POA&Ms, run vulnerability scans (Nessus, STIG), review logs, and contribute to NIST SP 800-171 and CMMC compliance. Mentored, with a final project presented to leadership.

Qualifications

• Pursuing a bachelor's degree in Cybersecurity, CS, IS, IT or related field.
• Junior or senior with at least one semester remaining after the internship.
• Foundational knowledge of networking and Windows/Linux operating systems.
• Strong attention to detail and clear written communication.
• Ability to work independently and ask questions when unclear.
• Proficiency with Microsoft Office.
• U.S. Government SECRET clearance eligibility.
• Willingness to travel between locations as needed.

Responsibilities

• Prepare and update SSPs and RMF artifacts per NIST SP 800-53.
• Track POA&Ms and follow up with system owners on remediation.
• Run vulnerability scans and summarize findings (Nessus, STIG).
• Perform routine audit log reviews for continuous monitoring.
• Support IA tasks such as account management and media protection.
• Help track patch status and change-control records.
• Collect evidence for NIST SP 800-171 and CMMC compliance.
• Develop security awareness content and user guidance.
• Suggest improvements to security procedures and checklists.

Skills

Networking basics

Windows OS

Linux OS

Security concepts

Documentation

Independent work

MS Office

Clear written communication

Education

Bachelor's degree in Cybersecurity

Related degree acceptable

Tools

Nessus

SCAP

STIG

Splunk

Job description

Job Description Title: Information System Security Officer (ISSO) Intern

Duration: Summer (12 weeks)

Location: Indianapolis, IN

At Rolls-Royce we are committed to always being a force for progress; powering, protecting and connecting people everywhere. Our Internship programs are designed to help you build your career from day one. You'll work on meaningful projects, learn from experienced colleagues, and develop the skills to make a real impact. That's Infinite Potential.

Role overview:

Rolls-Royce LibertyWorks' cybersecurity team protects the information systems behind our U.S. defense programs, including systems that process classified information. As an ISSO Intern, you'll work alongside our Information System Security Managers (ISSMs) and ISSOs to keep those systems functional, monitored, and compliant. You'll gain hands‑on experience with the Risk Management Framework (RMF) in a cleared defense environment, with a dedicated mentor and a final project you present to security leadership.

What you'll be doing:

• Helping prepare and update System Security Plans (SSPs) and other RMF authorization artifacts, following NIST SP 800-53 and the DCSA Assessment and Authorization Process Manual (DAAPM)
• Tracking Plans of Action and Milestones (POA&Ms) and following up with system owners on remediation
• Running and reviewing vulnerability and configuration compliance scans (for example Nessus, the SCAP Compliance Checker and STIG checklists) and summarizing the findings
• Performing routine audit log reviews and documenting the results for continuous monitoring
• Supporting information assurance tasks such as account management, media protection, assured file transfers and hardware/software inventory
• Helping track patch status and change-control records for system updates
• Collecting evidence and organizing documentation for NIST SP 800-171 and CMMC compliance on our unclassified networks
• Helping develop security awareness content and user guidance
• Suggesting and documenting improvements to security procedures and checklists

Who we’re looking for:

• Working towards a bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, and/or related degree
• A strong passion for the future of technology
• Current college/university junior or senior with at least one semester of school remaining after the internship
• Foundational knowledge of networking, Windows and/or Linux operating systems, and core security concepts such as access control, authentication and encryption
• Strong attention to detail and clear written communication; much of this role is accurate documentation
• Able to work independently on assigned tasks and ask questions when something is unclear
• Proficiency with Microsoft Office (Word, Excel, Teams)
• Able to obtain and maintain a U.S. Government SECRET security clearance; candidates may be required to begin the clearance process before their start date
• This role supports work subject to U.S. export control regulations (ITAR/EAR)
• Classified systems work must be done onsite
• A willingness to work flexibly and travel between locations: in most cases, you'll be able to meet the requirements in the location you are recruited to, however, we may need you to be flexible and travel between sites during or for your internship
• An open-minded, curious, and agile approach to work and career development

Preferred qualifications (but not required):

• Coursework or projects involving NIST RMF, NIST SP 800-53/800-171, CMMC or ISO 27001
• CompTIA Security+ (completed or in progress)
• Comfort with the Linux command line
• Scripting experience in PowerShell, Python or Bash
• Exposure to security tools such as vulnerability scanners, SIEM platforms (for example Splunk) or STIG Viewer
• Participation in cyber competitions, CTFs or a home lab

What we offer:

• Meaningful work from day one, with the support to help you succeed
• A culture that invests in your personal and professional development
• The chance to grow your skills while working on real projects in a global company

Minimum GPA: 3.0

Work authorization eligibility: To be considered, you must also be a U.S. Citizen.

There is no visa sponsorship for this position.

This role supports work subject to U.S. export control regulations (ITAR/EAR)

Classified systems work must be done onsite

Rolls-Royce is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to any protected characteristics.

EmergingTalent Programme

Rolls-Royce pioneers cutting-edge technologies that deliver the cleanest, safest and most competitive solutions to our planet's vital power needs.