Cybersecurity Analyst Intern

The Executive Office of Technology Services and Security (EOTSS) is the lead enterprise technology organization for the Commonwealth of Massachusetts. Charged with driving the ongoing alignment of business and technology across the Commonwealth’s Executive Branch, EOTSS oversees and manages the enterprise technology, digital infrastructure and services, as well as the Commonwealth Security Operations Center and an enterprise Standard Operating Environment that includes an information security and risk management framework for over 125 state agencies and over 43,000 state employees.  We directly serve our constituents by providing digital services and tools that enable taxpayers, drivers, businesses, visitors, families and other citizens to do business with the Commonwealth in a way that makes every interaction with government easier, faster, and more secure.

Our Mission: We provide technology leadership across the Commonwealth to enhance the quality of public service and foster positive community outcomes.

The EOTSS Cybersecurity Team is seeking to hire two (2) Cybersecurity Analyst Interns. There are two groups in the EOTSS Security Operations Center: Vulnerability Management Program (VMP) and Cyber Detection & Response (CDR). The Vulnerability Management team actively searches the network for security vulnerabilities and works with hosting teams to remediate them. The Cyber Detection & Response team monitors evidence of malicious activity and works to resolve those issues. In this role, the analyst would be focused on one of these groups specifically.  Additionally, they will support general duties related to the Security Operations Center.

The primary work location for this role will be 200 Arlington Street Chelsea, Massachusetts 02150. The work schedule for this position is Monday through Friday, 8AM to 4PM EST. This position is expected to follow a hybrid model of reporting to work that combines in-office workdays and work from home days as needed.  

The duration of this summer internship is from Monday, June 1st through Friday, August 7th, 2026.

Duties and Responsibilities:

• Alert Triage & Analysis

• Log analysis

• Incident Documentation

• Malware & Virus analysis

• Threat Intelligence Research

• Incident Containment and Remediation

• Vulnerability Scanning: Network, Cloud Security, Application Security

• Vulnerability Assessment / Risk Exposure Management

• Vulnerability Reporting

• Penetration Testing Support

• Security Tool Management

• Playbook / Documentation Creation and Updates

• Process Improvement & Automation

• Other duties as assigned

Preferred Knowledge, Skills, & Abilities:

• Possess critical thinking skills.

• Must be a self-motivated individual with the ability to work with minimal supervision.

• Reasonable knowledge of technology.

• Knowledge of Microsoft Office Application (Word, Excel, and PowerPoint).