Remote Cybersecurity Intern: Honeypot & Threat Analysis

CAI; Boise (ID); Remote; USD 23,000 - 32,000; Part time

Job summary

CAI is seeking an Internet Storm Center Intern to advance our cybersecurity internship program. You will deploy and operate a DShield honeypot, analyze attack activity, and document insights from real-world threats.

This role is part-time and fully remote, with work authorizations only for non-sponsored applicants. Ideal candidates have foundational cybersecurity and networking knowledge, basic Python, and the ability to document findings clearly.

Qualifications

• Foundational knowledge of cybersecurity concepts and networking.
• Ability to install, configure, and operate technical systems independently.
• Basic to intermediate Python knowledge and the ability to understand simple scripts.
• Ability to investigate and document technical findings clearly.
• Reliable internet connectivity and access to required honeypot hardware or an approved platform.
• Completion of required advising milestones and prerequisites before registration.

Responsibilities

• Deploy, configure, and operate a DShield honeypot during the internship period.
• Monitor and analyze attacks detected by the honeypot.
• Research suspicious activity and investigate indicators of observed attacks.
• Create and submit attack observation reports summarizing findings and lessons learned.
• Review internship expectations and submit deliverables through Canvas regularly.
• Work independently while leveraging mentor support when needed.
• Practice effective time management to meet internship deliverables.
• Apply cybersecurity concepts learned in coursework to real-world attack analysis.

Skills

Cybersecurity basics

Python basics

Networking concepts

Independent work

Time management

Tools

Linux/Ubuntu

Virtual machines

Proxmox/VMware ESXi

Python-based security tools

Job description

CAI is seeking an Internet Storm Center Intern to advance our cybersecurity internship program. You will deploy and operate a DShield honeypot, analyze attack activity, and document insights from real-world threats.

This role is part-time and fully remote, with work authorizations only for non-sponsored applicants. Ideal candidates have foundational cybersecurity and networking knowledge, basic Python, and the ability to document findings clearly.