Fall 2026 IT Intern ( Incident Responder)

OPPORTUNITY: The AO is seeking applicants for its Student Internship Program. The opportunity is intended to provide valuable work experience and prepare students interested in a public service career. The AO is looking for student interns with backgrounds and/or demonstrated interest in the following areas: human resources public affairs law business administration (marketing budget accounting etc.) and information technology. The student intern will have an opportunity to improve his or her writing research analytical logical multi-tasking and customer service skills. Additionally student interns are provided with several networking opportunities with fellow interns agency employees and other government employers.

All AO internships are onsite at the Thurgood Marshall Federal Judiciary Building in Washington DC. Telework is not permitted.

This specific internship will be in the Department of the Chief Information Office (DCIO) Information Technology Security Office (ITSO).

Duties include but are not limited to:

1. Conducting thorough analysis of network endpoint and application logs to identify and assess intrusions determine their scope and impact and implement appropriate containment strategies to mitigate threats.
2. Reviewing real-time dashboards studies technical and user-behavioral anomalies and correlates events from multiple sources to help identify early signs of compromise such as unusual login patterns abnormal network traffic unauthorized file changes privilege misuse or suspicious process execution.
3. Providing timely and accurate incident status updates to key stakeholders including the incident commander SOC leaders and executives.
4. Maintaining and enhances the organizations incident response framework by defining and refining the incident declaration processes updating the Judiciarys Incident Response Plan and identifying gaps in existing procedures awareness training or playbooks to improve compliance and reduce risk.
5. Developing and tests enterprise-wide detection and response capabilities including endpoint artifact retrieval isolation techniques and Yara rule creation to improve threat detection and containment at scale.
6. Driving continuous improvement through the development and validation of readiness exercises standard operating procedures and playbooks while pioneering innovative incident response techniques for PaaS and SaaS cloud environments and leveraging automation to streamline response efforts.
7. Communicating analysis of incidents response actions detection gaps policy violations and improvement measures to update response strategies based on evolving understanding of threats and post-incident reviews.

CONDITIONS OF EMPLOYMENT

1. All information is subject to verification. Applicants are advised that false answers or omissions of information on application materials or inability to meet the following conditions may be grounds for non-selection withdrawal of an offer of employment or dismissal after being employed. Selection for this position is contingent upon completion of OF-306 Declaration of Federal Employment during the pre-employment process and proof of U.S. citizenship. For a list of documents that may be used to provide proof of citizenship or authorization to work in the United States please refer to Form I-9 Employment Eligibility Verification.
2. All new AO interns will be required to complete an FBI fingerprint-based national criminal database and records check and pass a public trust suitability check.
3. New interns to the AO will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify including your rights/responsibilities visit new AO interns are required to identify a financial institution for direct deposit of pay before appointment.

All students in the Volunteer Student Internship Program must be enrolled or accepted for enrollment as a degree-seeking student taking at least a half-time academic or technical course load in an accredited 2 year or 4 year program or in a post-secondary level program. Students must also be in good academic standing maintaining a GPA of 3.0 or higher.

Additional Qualification Requirements: In addition to meeting the BASIC QUALIFICATIONS REQUIREMENTS applicants must also:

• Work well in a team environment.
• Have strong organization and communication skills and be detailed oriented.
• Have a working knowledge of computer applications such as Microsoft Word Microsoft Excel or WordPerfect.
• Have excellent writing reading and interpersonal skills.
• Be able to organize a variety of assignments simultaneously and meet tight deadlines.

• The ideal candidate is an undergraduate or graduate student in Cybersecurity.