Remote Cybersecurity Intern: Honeypot & Threat Analysis

CAI; Salt Lake City (UT); Remote; USD 23,000 - 32,000; Part time

Job summary

CAI is seeking an Internet Storm Center Intern in a remote, part-time role. The internship focuses on deploying and operating a DShield honeypot, analyzing attack activity, and documenting observations from real-world threats. Strong Python basics and cybersecurity knowledge are needed.

Ideal candidates will monitor attacks, research suspicious activity, and submit observations and deliverables through Canvas with mentor support as needed. Remote work is available.

Qualifications

• Foundational knowledge of cybersecurity concepts and networking.
• Ability to install, configure, and operate technical systems independently.
• Basic to intermediate Python knowledge and the ability to understand simple scripts.
• Ability to investigate and document technical findings in a clear manner.
• Reliable internet connectivity and access to required honeypot hardware or an approved alternative platform.
• Completion of required advising milestones and program prerequisites prior to registration.

Responsibilities

• Deploy, configure, and operate a DShield honeypot during the internship period.
• Monitor and analyze attacks detected by the honeypot.
• Research suspicious activity and investigate indicators associated with observed attacks.
• Create and submit attack observation reports summarizing findings and lessons learned.
• Review internship expectations and submit deliverables through Canvas on a regular basis.
• Work independently while leveraging mentor support when needed.
• Practice effective time management and self‑management to meet internship deliverables.
• Apply cybersecurity concepts learned through academic coursework to real‑world attack analysis.

Skills

Cybersecurity concepts

Networking fundamentals

Python knowledge

Independent work

Documentation of findings

Job description

CAI is seeking an Internet Storm Center Intern in a remote, part-time role. The internship focuses on deploying and operating a DShield honeypot, analyzing attack activity, and documenting observations from real-world threats. Strong Python basics and cybersecurity knowledge are needed.

Ideal candidates will monitor attacks, research suspicious activity, and submit observations and deliverables through Canvas with mentor support as needed. Remote work is available.