Information Security Intern

MillerKnoll Summer Internship Program is a paid opportunity that allows you to gain real-world experience and cultivate your professional skills. Besides the work you’ll do within your field of study, you'll participate in one-on-one meetings with mentors, a summer-long project, learning sessions with senior leaders, and much more.

About this Opportunity
 

MillerKnoll’s Summer Internship Program is a paid, 12-week opportunity that provides a 100% real-world experience for students early in their careers. Throughout the summer you will apply academic learning to real-world situations and cultivate leadership, problem-solving, and communication skills. 

We are seeking a detail-oriented and passionate Information Security Intern to join our security team. As an intern, you will assist in the day-to-day operations of maintaining and improving the organization’s security infrastructure handling tasks and activities within Security Operations and Governance, Risk & Compliance. This role offers hands-on experience in various security practices and provides an opportunity to learn how information security is applied in a business setting.

​What You'll Do 

Security Monitoring and Analysis:

• Assess with monitoring the MillerKnoll enterprise in IT, OT and AWS environments; determine critical issues and its impact to the organization; assist with remediation and post-mortem filing of all critical events.

• Monitor security alerts from firewalls, intrusion detection systems (IDS), and other Advanced Threat Protection, Endpoint Detection and Response (EDR) tools.

• Analyze and report on suspicious activity, anomalies, potential threats, and vulnerabilities.

Incident Response:

• Support the incident response team in investigating security incidents.

• Help document and execute response plans to mitigate potential threats.

• Conduct table-top simulations running various cyber security incident scenarios.

Vulnerability Management:

• Conduct vulnerability assessments and on MillerKnoll digital assets using vulnerability tools, processes, and procedures.

• Assist in identifying, reporting, and tracking security vulnerabilities.

• Provide support in the deployment and execution of patches to ensure timely security updates.

Security Awareness:

• Help develop and distribute educational materials to raise employee awareness on information security best practices.

• Support the organization of internal security training sessions and awareness programs.

Compliance, Policy Review, Security Framework:

• Assist in reviewing and updating security policies, procedures, and guidelines.

• Assess and identify gaps within the technology environments based on NIST security framework; assist in applying appropriate controls to improve NIST CSF scoring.

Risk Assessment:

• Participate in security risk assessments and help evaluate potential risks to the company’s assets.

• Assist in developing risk assessment profiles and metrics.

• Assist in developing risk mitigation strategies and recommending security improvements.

Research and Documentation:

• Conduct research on new security threats, vulnerabilities, and trends in cybersecurity.

• Maintain detailed documentation of security incidents, policies, procedures, and risk assessments.

What You Bring 
The needed skills and experience for this role include... 

• Basic understanding of cybersecurity principles, firewalls, IDS/IPS, security frameworks, and risk management fundamentals.

• Basic understanding of networking, secure online connection, access control, secure email, backup file protection

• General familiarity with security tools such as SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation and Response) vulnerability management tools, Data Loss Prevention (DLP), etc.

• Experience with OS (Linux, MacOS, Windows, etc.).

• Knowledge of industry security frameworks such as NIST CSF, ISO 27001, CIS, etc.

• Familiarity with cloud security practices (e.g., AWS, Azure) is a bonus.

• Familiarity with scripting or programming languages like Python, Bash, or PowerShell is a plus.

• Enrolled and pursuing a four-year Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology or a related field from an accredited college or university, and able to provide transcripts upon request.