Cybersecurity & AI/Data Governance Intern

Position Summary

We are seeking a Cybersecurity & AI/Data Governance Intern to bridge the gap between security compliance and engineering. In this role, you will assist in the design, audit, and implementation of technical guardrails that protect our infrastructure and govern our data and AI systems. This position is ideal for an engineer who understands full-stack architectures, infrastructure-as-code, and systems administration, and wants to apply those skills to modern security engineering, Identity Governance and Administration (IGA), and secure AI deployment.

Profile

• Cybersecurity & AI / Data Governance Intern
• Department: Information Security
• Schedule: Full Time
• Pay: $15.00-$17.00

Essential Duties & Responsibilities

• Audit and refine RBAC permissions across all platforms.
• Integrate and modernize Identity Providers using OIDC/SAML for secure access.
• Develop secure, reusable infrastructure templates with Terraform, Ansible, or AWS CDK to meet compliance standards.
• Harden enterprise Linux and containerized environments.
• Configure firewall, VLANs, and network protocols to segment development, production, and HPC environments.
• Maintain and monitor logs to address vulnerabilities.
• Define data workflows and ensure privacy and retention in data pipelines (LDAP/ZFS).
• Set security controls for Vision-Language Models and vector searches to prevent unauthorized data/model access.
• Oversee GPU resources and enforce usage policies to support compliance.

Preferred Technical Experience

• Languages: Python, TypeScript, Java/Kotlin, or C/C++.
• Identity & Networking: Understanding of OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls.
• Infrastructure & DevOps: Practical experience with Linux systems administration (RHEL preferred), virtualization/containers (Docker, Kubernetes, Proxmox), and CI/CD automation (GitHub Actions, Ansible, Terraform).
• Database & Storage: Familiarity with caching layers (Redis/Valkey), structured/unstructured databases (SQL, MongoDB), and redundant storage file systems (ZFS).

Compensation Range

The compensation range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.

Note

This range is based on Boston-area data, and is subject to modification based on geographic location. Equal Opportunity Employer/Disabled/Veterans According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.