Summer 2027 Vulnerability Management Analyst Undergraduate Intern

Highmark Health; Pennsylvania; Hybrid; USD 18,000 - 30,000; Full time

Job summary

Highmark Health is offering a Summer 2027 Vulnerability Management Analyst Undergraduate Internship to gain hands-on experience in an enterprise Security Assurance program. The role covers vulnerability discovery, validation, and remediation across applications, systems, and cloud environments.

You will work with vulnerability data, develop metrics and dashboards, and learn to assess risk while collaborating with security teams and stakeholders.

Qualifications

• Full or part-time enrollment in an accredited college or university baccalaureate program.

Responsibilities

• Assist in identifying, validating, analyzing, prioritizing, and tracking security vulnerabilities across enterprise assets.
• Support remediation management and risk reduction through data analysis and reporting.
• Utilize Excel, PowerShell, and Python to automate repetitive tasks and develop dashboards.

Skills

Cybersecurity Basics

Vulnerability Management

Python

Excel

PowerShell

Education

Undergraduate student in Cybersecurity or related field

Tools

Vulnerability Scanning Tools

Microsoft Security Tools

Cloud Security Tools

Job description

Company : Highmark Health Job Description : The Summer 2027 Vulnerability Management Analyst Undergraduate Internship provides students with an opportunity to gain meaningful, hands-on experience supporting an enterprise Information Security program. This internship is designed to develop the next generation of cybersecurity professionals through direct exposure to vulnerability identification, technical validation, security data analysis, remediation management, automation, and enterprise risk reduction. As a member of the Security Assurance and Vulnerability Management team, the intern will work alongside experienced Information Security professionals to help identify, validate, analyze, prioritize, and track security vulnerabilities across enterprise applications, systems, infrastructure, and cloud environments. Participants will gain practical experience understanding the complete vulnerability management lifecycle, from initial discovery and technical validation through asset ownership identification, risk assessment, remediation, and closure. The intern will work with vulnerability and asset data from multiple sources to help establish technical evidence, identify affected systems, determine ownership, and monitor remediation progress. The role will also provide exposure to vulnerability management platforms, Microsoft security technologies, cloud security tools, external attack-surface discovery, and security reporting and analytics. In addition to core vulnerability management activities, interns will have opportunities to use tools such as Excel, PowerShell, and Python to analyze security information, automate repetitive processes, develop metrics and dashboards, and improve operational efficiency. Through mentorship and collaboration with infrastructure, application, cloud, security operations, and other technology teams, participants will develop a broad understanding of how enterprise cybersecurity teams work together to identify vulnerabilities and reduce organizational risk.

SUMMARY OF JOB RESPONSIBILITIES

This job has the goal of providing the opportunity to acquire practical experience through direct exposure to the related business line(s) and to develop the next generation of diverse business professionals. To that end, the program will provide hands-on training and experience in the business line, expose the various career opportunities in the business line and related areas, and prepare participants for positions in the business. Typical responsibilities include, providing services to the day-to-day operating objectives of the assigned area, participating in projects and programs appropriate to the needs of the assigned area, participating in the planning and implementation of projects and initiatives, conducting research and reporting including recommendations or proposals for action.

REQUIRED QUALIFICATIONS

Full or part-time enrollment in an accredited college or university baccalaureate program.

PREFERRED QUALIFICATIONS

Currently pursuing a degree in Cybersecurity, Information Security, or a related technology discipline.

ESSENTIAL JOB FUNCTIONS

1. Communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems.
2. Under supervision, provide entry-level professional services as appropriate to the day-to-day operating objectives of the area. Receives guidance, training, and mentoring from senior personnel in planning and carrying out activities and assignments.
3. Undertake and/or participates in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization.
4. Participate in the planning and implementation of unit projects and initiatives within area of expertise and ability.
5. As specifically requested by management, conduct research and reporting inclusive of recommendations or alternative proposals for action.
6. Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit.
7. Perform miscellaneous job-related duties as assigned.

Disclaimer

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement

This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies. As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Pay Range

Minimum: Pay Range Maximum:

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Highmark Health is a national, blended health organization that includes one of America’s largest Blue Cross Blue Shield insurers and a growing regional hospital and physician network. Based in Pittsburgh, Pa., Highmark Health’s 35,000 employees serve millions of customers nationwide through the nonprofit organization’s affiliated businesses, which include Highmark Inc., Allegheny Health Network, HM Insurance Group, United Concordia Dental, HM Health Solutions and HM Home & Community Services.