Cybersecurity Intern

Long-term internship, 30+ hours per week | Remote, United States | Reports to the Director of Cybersecurity | Path to full-time

EVOCS Overview

EVOCS's journey began with a mission to empower businesses with advisory expertise, empowered with ideal technologies to provide them with comprehensive solutions to grow and prosper.

Founded by a team of passionate experts, EVOCS has grown into a trusted partner to a growing number of leaders across their respective industries. Our roots in employee-managed operations reflect our commitment to quality, consistency, and client success.

If you enjoy working in a hyper-fast-growing company, are eager to be part of an agile team, and want to be part of our success story, then let's talk!

🎯 Role Overview

EVOCS is looking for a cybersecurity intern to work alongside our security team on real work. Not shadowing, not busywork. You will be given actual tasks, with oversight, and the expectation that you learn fast and take on more.

This is a long-term internship, not a summer placement, and it is built as a path to a full-time role. If you do well, we want to hire you. You will work directly with the Director of Cybersecurity, who will supervise your work and be the person you learn from.

🧩 What You Will Work On

• Microsoft security. Configuring, hardening, testing, and documenting across the Microsoft Cloud and Endpoint security stack (Azure, Microsoft 365, Entra, Defender, Intune, Purview). Reviewing settings against benchmarks and finding what is misconfigured.
• Threat and vulnerability research. Stay on top of new advisories, CVEs, and attack techniques, work out which ones actually matter to our environment and our clients, and write short, clear briefs on what you find. Not AI slop!
• Building and automating. Write scripts and small tools that remove manual work: pulling data, generating reports, collecting evidence, checking configurations. If you build something that saves the team hours, that is a win here. AI-assisted coding is welcome, provided you understand what your code does.
• Compliance support. Control evidence collection, access reviews, vendor reviews, asset inventory reconciliation, and keeping documentation and ownership mapping current.
• Engagement support. Helping prepare material behind our client security work: research, data organization, and first-pass analysis. You will not be client-facing, but you will see how real engagements are run.
• Security tooling. Evaluating, standing up, testing, and documenting security tools, and helping decide whether they are worth keeping.

🧠 What You Will Bring

• Foundational security knowledge from coursework, certifications (Security+ or similar), or self-study. No professional experience required.
• Comfortable across Windows, macOS, and Linux, and willing to dig into unfamiliar tools without being walked through them.
• Some scripting ability (PowerShell, Python, or equivalent) or clear evidence you can pick it up quickly.
• Clear written communication. A lot of this work is taking something messy and explaining it plainly.
• Accuracy and follow-through. Much of this work is only useful if it is right and finished.
• Curiosity, and the willingness to ask a question rather than guess. Guessing quietly is the one habit that causes problems here.
• Available 30+ hours per week on an ongoing basis, based in the United States and authorized to work without sponsorship.

🛠️ Show Us You Actually Care About This

You will not have much professional experience, and that is fine. What you have built on your own time is the best evidence we have, and here it counts more than coursework.

• A home lab: a SIEM you stood up, a detection lab, a small AD domain you attacked, anything you broke and rebuilt.
• A GitHub profile: scripts, parsers, automation, tools you wrote because something annoyed you.
• CTFs, HackTheBox, TryHackMe, or writeups explaining something technical to other people.
• Anything else that shows this is a genuine interest rather than a job search: a blog, a project, a talk, a tool nobody asked you for.

It does not need to be polished. Send links and tell us what you learned building it.

⭐ Nice to Have

• Any exposure to Microsoft 365, Entra, and Azure.
• Familiarity with security or compliance frameworks (NIST CSF, CIS Benchmarks, ISO 27001, SOC 2).
• Experience with a SIEM, EDR, or vulnerability scanner, including free and open source ones.
• An interest in how AI is being applied to security work, and to building things generally.

🎁 What You Will Get Out of It

• Direct mentorship from the Director of Cybersecurity, with your work reviewed rather than rubber-stamped.
• Hands-on experience across the Microsoft security stack, compliance operations, and live client security work.
• Real projects you can point to, including anything you build.
• A genuine path to a full-time role. That is the intent of this internship, not a footnote.

📋 The Details

• Type: long-term paid internship, 30+ hours per week, with the intent to convert to full-time.
• Location: remote, United States.
• System access: assigned progressively as you demonstrate judgment, starting with supervised work.