Intern, Technology - Cyber Risk & Infrastructure

Technology – Cyber Risk & Infrastructure - Intern 

Kroll is a global leader in Risk and Financial Advisory services, operating at the intersection of data, technology, and complex decision-making. We are seeking a high-performing Data Engineering Intern to help build and scale the data infrastructure that powers analytics, automation, and AI across the firm. This role is for candidates who want real engineering responsibility, not shadow work. You will design and implement production-grade data pipelines, work with cloud-native tooling, and partner with senior engineers and data scientists on systems that matter.

Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. 

Clients count on us for quick and expert support in the event of and in preparation against a cyber incident; from incident response to risk assessments, and complex forensics to breach notification and ID theft remediation we help clients – of all sizes – respond with confidence.

At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. Apply now to join One team, One Kroll.

RESPONSIBILITIES:

The C&DR Intern will primarily work closely with the Infrastructure & Solutions Architect’s and Engineer’s on projects but will also participate in BAU support where required.  Out of hours work will be required to complete some projects or system updates, these responsibilities are shared within the team.

• Building, automating, deploying and managing end-to-end solutions within Kroll’s Hybrid Cloud data center environments.

• Work closely with Infrastructure & Solutions Architects and Engineers to support delivery of priority initiatives across Kroll’s Hybrid Cloud and data center environments, while also contributing to business-as-usual (BAU) operational support as needed.

• Support project execution discipline by tracking tasks and dependencies, capturing decisions and action items, and producing concise status updates for stakeholders.

• Collaborate effectively across a global organization, partnering with internal teams and third parties to drive progress, unblock issues, and maintain a high standard of delivery.

• Demonstrate strong ownership by independently driving assigned workstreams to completion, proactively identifying improvements, and escalating risks early with recommended options.

• Help maintain and improve runbooks and operational procedures (standard operating procedures, escalation paths, recovery steps), ensuring content is clear, current, and reusable by the broader team.

• Participate in technical design and delivery documentation, collaborating with the Solutions Designer, Development Architect, and third parties to ensure design artifacts are accurate, complete, and maintained through implementation.

• Assist with threat intelligence and research tasks by monitoring credible sources, summarizing emerging threats and vulnerabilities, and translating technical details into concise implications and recommended actions for internal and client audiences.

REQUIREMENTS:

• Currently pursuing a degree in Computer Science, Cyber Security, Information Systems, Data Engineering, or a closely related technical field

• Graduation date between December 2026 and September 2027

• Strong verbal/written communication skills with the ability to produce clear, well-structured client-ready content (emails, notes, executive summaries, and slide narratives).

• Foundational cybersecurity knowledge, including common threats (phishing, ransomware, credential theft), basic defensive concepts, and security terminology.