Job Description

Cybersecurity Intern — Summer 2027

Department: Enterprise Security

Reports to: Senior Director – Enterprise Security

Location: On-site — Memphis, TN

Duration: May 24 – August 6, 2027 (~11 weeks, full-time, 40 hours/week)

Status: Draft — 2027 project assignments subject to finalization before start date

Position Summary

Highline Warren is a private-label manufacturer and distributor of automotive aftermarket consumables, operating roughly 27 manufacturing and distribution facilities across North America. Our Enterprise Security team owns enterprise cybersecurity, OT/ICS security across our blending and packaging plants, and cyber risk and governance.

The Cybersecurity Intern will work directly alongside our Enterprise Security team on the build-out of our security program. This is a hands-on role focused on real program work — documentation, inventory, risk and vendor management support, and metrics. The intern will gain exposure to how a security program is built and matured inside a private-equity-held manufacturer, including governance, third-party risk, and the distinct challenges of securing an industrial/plant environment.

Key Responsibilities & Duties

The intern will support the Enterprise Security team across a rotating mix of the following, scaled to skill level and business priorities during the internship window:

• Security documentation: Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.
• Third-party risk management (TPRM): Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses.
• Vulnerability management support: Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences.
• Assessment & audit support: Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).
• Framework research & mapping: Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.
• Security awareness: Support the awareness program — phishing-simulation logistics, training content, and internal communications.

Potential Project Focus Areas

Specific scope will be confirmed closer to the internship, but the intern is expected to support the following initiatives:

• Third-Party Risk Management (TPRM) — supporting vendor onboarding, platform data entry, and evidence collection.
• Cloud security sensors and cloud posture management (CSPM) — supporting sensor coverage tracking and posture-finding review.
• AI agent / non-human identities (NHI) security and alerting — supporting inventory, monitoring, and alert triage for machine and agent identities.
• Zero trust / secure access — supporting documentation and rollout tracking for secure-access initiatives.

Required Qualifications

• Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).
• Strong written communication and documentation skills; able to translate technical detail into clear, organized material.
• Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams).
• Demonstrated reliability and sound judgment in handling confidential and sensitive information.
• Able to work on-site in Memphis, TN for the full internship period.

Preferred Qualifications

• Familiarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443).
• Exposure to scripting or automation (e.g., Python, PowerShell).
• Interest in cloud security, identity, OT/ICS security, or manufacturing environments.
• Progress toward a relevant certification (e.g., CompTIA Security+).
• Familiarity with ticketing or project tools (e.g., Jira).

What You'll Gain

• Direct experience building security capabilities in an emerging-maturity program.
• Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.
• Practical experience with third-party risk management, cloud security, and identity.
• Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.
• Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.