Cybersecurity Intern

Department: Enterprise Security

Reports to: Senior Director – Enterprise Security

Location: On-site — Memphis, TN

Duration: May 24 – August 6, 2027 (~11 weeks, full-time, 40 hours/week)

Status: Draft — 2027 project assignments subject to finalization before start date

Highline Warren is a private-label manufacturer and distributor of automotive aftermarket consumables, operating roughly 27 manufacturing and distribution facilities across North America. Our Enterprise Security team owns enterprise cybersecurity, OT/ICS security across our blending and packaging plants, and cyber risk and governance.

The Cybersecurity Intern will work directly alongside our Enterprise Security team on the build-out of our security program. This is a hands-on role focused on real program work — documentation, inventory, risk and vendor management support, and metrics. The intern will gain exposure to how a security program is built and matured inside a private-equity-held manufacturer, including governance, third-party risk, and the distinct challenges of securing an industrial/plant environment.

The intern will support the Enterprise Security team across a rotating mix of the following, scaled to skill level and business priorities during the internship window:

• →

  Security documentation: Assist in drafting, formatting, and maintaining policies, standards, procedures, and runbooks under the direction of the Enterprise Security team.

• →

  Third-party risk management (TPRM): Help gather and normalize vendor lists, enter and track vendor data in our TPRM platform, monitor risk-rating alerts, and follow up on outstanding questionnaire responses.

• →

  Vulnerability management support: Pull and organize scan output, help track remediation status, and build clear summary views for technical and non-technical audiences.

• →

  Assessment & audit support: Help collect, organize, and index evidence supporting framework validation and maturity assessments (e.g., NIST CSF 2.0 alignment).

• →

  Framework research & mapping: Conduct research and help map controls and gaps against recognized frameworks (NIST CSF 2.0, CIS Controls) to support gap analyses.

• →

  Security awareness: Support the awareness program — phishing-simulation logistics, training content, and internal communications.

Specific scope will be confirmed closer to the internship, but the intern is expected to support the following initiatives:

• Third-Party Risk Management (TPRM) — supporting vendor onboarding, platform data entry, and evidence collection.

• Cloud security sensors and cloud posture management (CSPM) — supporting sensor coverage tracking and posture-finding review.

• AI agent / non-human identities (NHI) security and alerting — supporting inventory, monitoring, and alert triage for machine and agent identities.

• Zero trust / secure access — supporting documentation and rollout tracking for secure-access initiatives.

• Currently pursuing a bachelor's (or advanced) degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Foundational understanding of core cybersecurity concepts (confidentiality/integrity/availability, common controls, basic risk concepts).

• Strong written communication and documentation skills; able to translate technical detail into clear, organized material.

• Proficiency with Microsoft 365 (Word, Excel, PowerPoint, Teams).

• Demonstrated reliability and sound judgment in handling confidential and sensitive information.

• Able to work on-site in Memphis, TN for the full internship period.

• Familiarity with at least one recognized framework (NIST CSF 2.0, CIS Controls, IEC 62443).

• Exposure to scripting or automation (e.g., Python, PowerShell).

• Interest in cloud security, identity, OT/ICS security, or manufacturing environments.

• Progress toward a relevant certification (e.g., CompTIA Security+).

• Familiarity with ticketing or project tools (e.g., Jira).

• Direct experience building security capabilities in an emerging-maturity program.

• Exposure to governance, risk, and compliance (GRC) work and how technical risk is translated into business language for executive and PE-sponsor audiences.

• Practical experience with third-party risk management, cloud security, and identity.

• Awareness of the differences between securing enterprise IT and an industrial/plant (OT) environment.

• Mentorship from experienced security practitioners and a clear view of the cybersecurity career path.