Job description

BerryDunn's Government Assurance Practice Group (GAPG) is seeking a Consulting Intern - Cybersecurity to join our Information Technology Security (ITS) practice. BerryDunn provides independent cybersecurity consulting that help organizations address complex business, operational, and technology challenges. As a Cybersecurity Intern, you will gain hands-on exposure to cybersecurity consulting by supporting experienced team members with client engagements, documentation review, research, analysis, and assessment activities. Responsibilities may include assisting with cybersecurity risk assessments, penetration testing, vulnerability assessments, security control evaluations, and the preparation of client-facing deliverables under the guidance of BerryDunn ITS consultants. The ideal candidate is pursuing a degree in cybersecurity, information technology, computer science, information systems, or a related field and has an interest in developing technical, analytical, communication, and consulting skills. This internship provides an opportunity to learn about cybersecurity frameworks, technical assessment methodologies, client service, and project delivery within a collaborative professional services environment. This fulltime internship will be based out of our Portland, ME office. The internship dates are as follows: May 25, 2027 to August 6, 2027. In order to be considered, you must include your unofficial academic transcription with your application. • Support cybersecurity consulting engagements by assisting team members with research, documentation review, data gathering, and analysis related to client environments, applications, networks, operating systems, and cloud-based platforms. • Learn how cybersecurity risks are identified, analyzed, and communicated by assisting with the development of practical, risk-based observations and recommendations under the guidance of experienced consultants. • Assist with penetration testing, vulnerability assessments, security reviews, compliance assessments, and technical testing activities by helping prepare materials, organize results, document observations, and support follow-up analysis. • Contribute to client-facing reports, presentations, executive summaries, and technical deliverables by drafting content, formatting materials, summarizing information, and incorporating feedback from project team members. • Support project coordination activities, including maintaining project documentation repositories, tracking assigned tasks, preparing meeting materials, and helping organize client-provided information. • Develop an understanding of cybersecurity consulting methodologies by participating in project activities, observing client interactions, and learning how assessment, compliance, risk management, and advisory services are delivered. • Gain exposure to cybersecurity frameworks and standards such as NIST, CIS Controls, PCI DSS, and other industry-recognized frameworks through supervised project work and internal learning activities. • Learn about a variety of client environments, technologies, industries, and operating models, including on-premises, hybrid, and cloud-based infrastructures. • Communicate professionally with project team members and, when appropriate, client stakeholders while demonstrating curiosity, responsiveness, and a collaborative approach to assigned work. • Collaborate with team members across client engagements and participate in staff meetings, project discussions, training sessions, and knowledge-sharing activities. • Build technical, analytical, communication, and consulting skills through hands-on experience, mentorship, self-directed learning, internal training, and exposure to professional development opportunities. • Stay curious about emerging cybersecurity threats, technology trends, cloud security concepts, and industry best practices, and apply that learning to support project teams and client service delivery. • Enrolled in an undergraduate or graduate degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field. • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. • Foundational understanding of cybersecurity principles, networking concepts, operating systems, enterprise IT environments, and cloud-based services, with a desire to continue building technical knowledge through hands-on experience and mentorship. • Coursework, lab experience, internship experience, or personal projects related to Windows, Linux, networking, cybersecurity, system administration, vulnerability management, or security configuration concepts. • Exposure to cybersecurity frameworks, testing concepts, or tools such as OWASP, NIST, CIS Controls, vulnerability scanning tools, security labs, or capture-the-flag exercises is helpful, but not required. • Ability to manage assigned tasks, meet deadlines, ask thoughtful questions, and communicate progress in a timely and professional manner. • Strong written and verbal communication skills, attention to detail, analytical thinking, problem-solving ability, and organization skills. • Ability to work collaboratively with project teams, accept feedback, contribute to shared work products, and take initiative with appropriate guidance. • Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, SharePoint, and Visio. • Interest in learning about cybersecurity regulations, industry standards, security frameworks, and leading practices used to evaluate and strengthen organizational security programs. • Interest in learning how security monitoring, log review, and security tools support the identification, investigation, and communication of potential cybersecurity risks. • Willingness to support vulnerability assessments, penetration testing activities, security assessments, and technical reviews by assisting with preparation, documentation, analysis, and follow-up activities under supervision. • Interest in learning how organizations assess compliance with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, PCI DSS, and other industry-recognized frameworks. • Ability to think analytically, identify patterns or inconsistencies, summarize information clearly, and support the development of practical recommendations with guidance from experienced team members. • Demonstrated interest in emerging technologies, cloud security, threat detection, and offensive security techniques, with a commitment to continuous professional development in the cybersecurity field. The hourly rate for this role is $30 per hour. This rate range represents BerryDunn’s good faith and reasonable estimate of the possible compensation at the time of posting. If an applicant possesses experience, education, or other qualifications more than the minimum requirements for this posting, that applicant is encouraged to apply, and a final rate may then be based on those additional qualifications; compensation decisions are dependent on the facts and circumstances of each case. The hourly rate for the finalist selected for this role will be based on a variety of factors, including but not limited to, years of experience, depth of experience, seniority, merit, education, training, amount of travel, and other relevant business considerations. Our people are what make BerryDunn special, and in return we strive to support our employees and help them thrive. Eligible employees have access to benefits that go beyond what’s expected to support their physical, mental, career, social, and financial well-being. Visit our website for a complete list of benefits and a look into our culture: Experience BerryDunn . We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process or perform essential job functions. Please contact careers@berrydunn.com to request an accommodation. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. About BerryDunn BerryDunn is the brand name under which Berry, Dunn, McNeil & Parker, LLC and BDMP Assurance, LLP, independently owned entities, provide services. Since 1974, BerryDunn has helped businesses, nonprofits, and government agencies throughout the US and its territories solve their greatest challenges. The firm’s tax, advisory, and consulting services are provided by Berry, Dunn, McNeil & Parker, LLC, and its attest services are provided by BDMP Assurance, LLP, a licensed CPA firm. BerryDunn is a client-centered, people-first professional services firm with a mission to empower the meaningful growth of our people, clients, and communities. The firm has been recognized for its efforts in creating a diverse and inclusive workplace culture, and for its focus on learning, development, and well-being. Learn more at berrydunn.com . Don’t See A Match For You At This Time? We invite you to join our Talent Connection and let’s stay in touch

Requirements

Must-haves

This fulltime internship will be based out of our Portland, ME office. The internship dates are as follows: May 25, 2027 to August 6, 2027.
In order to be considered, you must include your unofficial academic transcription with your application.
Learn how cybersecurity risks are identified, analyzed, and communicated by assisting with the development of practical, risk-based observations and recommendations under the guidance of experienced consultants.
Support project coordination activities, including maintaining project documentation repositories, tracking assigned tasks, preparing meeting materials, and helping organize client-provided information.
Gain exposure to cybersecurity frameworks and standards such as NIST, CIS Controls, PCI DSS, and other industry-recognized frameworks through supervised project work and internal learning activities.
Learn about a variety of client environments, technologies, industries, and operating models, including on-premises, hybrid, and cloud-based infrastructures.
Communicate professionally with project team members and, when appropriate, client stakeholders while demonstrating curiosity, responsiveness, and a collaborative approach to assigned work.
Collaborate with team members across client engagements and participate in staff meetings, project discussions, training sessions, and knowledge-sharing activities.
Build technical, analytical, communication, and consulting skills through hands-on experience, mentorship, self-directed learning, internal training, and exposure to professional development opportunities.
Stay curious about emerging cybersecurity threats, technology trends, cloud security concepts, and industry best practices, and apply that learning to support project teams and client service delivery.
Enrolled in an undergraduate or graduate degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Coursework, lab experience, internship experience, or personal projects related to Windows, Linux, networking, cybersecurity, system administration, vulnerability management, or security configuration concepts.
Exposure to cybersecurity frameworks, testing concepts, or tools such as OWASP, NIST, CIS Controls, vulnerability scanning tools, security labs, or capture-the-flag exercises is helpful, but not required.
Ability to manage assigned tasks, meet deadlines, ask thoughtful questions, and communicate progress in a timely and professional manner.
Strong written and verbal communication skills, attention to detail, analytical thinking, problem-solving ability, and organization skills.
Ability to work collaboratively with project teams, accept feedback, contribute to shared work products, and take initiative with appropriate guidance.
Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, SharePoint, and Visio.
Interest in learning about cybersecurity regulations, industry standards, security frameworks, and leading practices used to evaluate and strengthen organizational security programs.
Interest in learning how security monitoring, log review, and security tools support the identification, investigation, and communication of potential cybersecurity risks.
Ability to think analytically, identify patterns or inconsistencies, summarize information clearly, and support the development of practical recommendations with guidance from experienced team members.
Demonstrated interest in emerging technologies, cloud security, threat detection, and offensive security techniques, with a commitment to continuous professional development in the cybersecurity field.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Professional Development