In recent years, there has been a large gap between the amount of people trying to break into cybersecurity and the demand for more cybersecurity practitioners. According to the latest data from CyberSeek, the demand for cybersecurity workers exceeds the supply of cybersecurity professionals by 0.85 (August 2024). For every available cybersecurity job posting, there are 0.85 workers available, meaning that there are more job openings than there are workers.
One reason for this shortage is a lack of practical experience needed to break into the cybersecurity field. While boot camps and career service programs have been attempted, internships remain a timeless solution.
Internships offer supervised experiences that allow students to gain practical skills and knowledge, preparing them for their future careers. When done effectively, cybersecurity internships can propel students into successful careers and help alleviate the industry’s hiring gaps in the field.
Internship site: St. Luke’s Health System
St. Luke’s Health System (St. Luke’s) is one of the leading healthcare providers and the largest private employer in Idaho, with a significant impact in Boise and the surrounding region.
Although not exclusive to Boise State, students from the cyber operations and resilience program from the university have been awarded internships with St. Luke’s. As healthcare continues to draw the attention of malicious actors, the nature of these attacks is evolving at an unprecedented pace.
St. Luke’s cybersecurity program manager, Flor Perez, understands the importance of keeping up with ever-evolving threats. “When I joined the organization, there was interest for interns, especially from our Chief Information Security Officer, who continues to support the effort,” Perez said. “I initiated the program, and I am excited to continue growing, maturing and leading the internship program.”
Perez comes from a computer science background and has a Master of Science in Computer Science. She recalls her first job being a computer science teacher for blind students and then eventually transitioning to Fortune 100 companies such as Microsoft and Hewlett Packard. She was introduced to cybersecurity and became increasingly interested in the field, eventually earning SANS certifications such as the GIAC Security Leadership Certification (GSLC).
Perez believes that internships are beneficial for students. “I have had interns tell me, ‘I knew the theory but during this internship is when I really understand what that theory means. I am seeing it in action. Just now, I understand the benefits and challenges and how all this theory can be applied.’ Also, when they are in college, they may not internalize all the different types of cybersecurity-related possibilities.
“We give interns exposure to various disciplines of cybersecurity (Identity and Access Management, Risk and Governance and Offensive and Defensive Security). This helps the intern to identify what they like the most and be able to direct their job search to cyber positions in those areas that they want to continue exploring.”
Furthermore, Perez believes that internships help students understand what it’s like working in the workforce, as well as the local and global cybersecurity field in general.
“Internships help St Luke’s better understand the new generation, how they think and their values such as work-life balance or high emphasis on inclusion. The intern program helps St Luke’s get to know these interns better, their mentality, creativity and what is important to them to keep evolving and growing.”
Tips for Cybersecurity Interns
Cybersecurity continues to be a sought-after field, meaning internships can be competitive. Although internships are meant to help teach and ignite progress for students, students must carry some key attributes to show promise and potential.
Perez states, “When interviewing interns, we look for basic cyber skills, common sense, people who are responsible and take assignments seriously, people who can deliver, who are self-driven, that have an initiative, as well as a personality that can integrate well with the team.”
Furthermore, if the competition is close between some candidates, selection may come down to a small detail. Perez explains, “Sometimes there may be too many strong candidates and we will then rely on selecting candidates that best align with our roadmap work because we want to have people work in areas they are interested in.”
These are just examples of what Perez looks for to add to her team, but many other organizations may be looking for something else. It is always important to ask what companies look for in interns when being interviewed.
It is also important not to have expectations of immediate employment with an internship. Just because a company hires interns, does not mean they are creating a pipeline of potential employees. It will depend on the company and the availability of open positions.
“If we had the opportunity to hire, we would. When we hire interns, we make it clear that we don’t promise a job position,” Perez said. “Regardless, the internship will benefit the local and cyber community.”
Perez sees that there is a larger picture in cybersecurity than just their organization. She sees the need for cybersecurity talent in the Boise community and in Idaho, as well as the world.
“All of our interns, after completing the program, have gotten jobs in cybersecurity,” Perez said. So, no matter what, St Luke’s internship program benefited the interns, St. Luke’s and the cybersecurity community.
Overall, Perez’s main advice is to make sure cybersecurity is a true interest and passion as the field will always foster inquisitiveness and perseverance.
“People (in cybersecurity) should have a curious mind because technology is always evolving. You should always be learning because adversaries are evolving, so you need to figure out new defenses. Those who enjoy challenges and have a passion for cybersecurity will persevere.”
Cybersecurity internships hope to bring curiosity and passion for the industry out of students, or at least help students realize that this is what they want to do as a career. Some of the activities St. Luke’s cybersecurity interns perform are helping with assessments, participating in incident response drills and working on specific projects under a leader and a team.
Cyber operations and resilience internship course
Boise State’s online cyber operations and resilience program grants students the ability to count internship experiences towards students’ college credits and ultimately gain hands-on experiences.
Michelle Bassett praises the program for providing internship opportunities for students. “I have had students land jobs after their internships were done, which makes me super thrilled for them!”
The transition from student to employee shows that the cyber operations and resilience program focuses on having students apply their knowledge and build their competencies in cybersecurity. While students are responsible for finding their own internships, the cyber operations and resilience program occasionally posts internship opportunities for students to apply.
The program continues to build relationships with companies within the state of Idaho and nationwide. Some internships that cyber operations and resilience students were accepted to were POWER Engineers, Idaho National Laboratories, and U.S. Bank.
Learn more about the cyber operations and resilience program
Earning an online Bachelor of Science in Cyber Operations and Resilience from Boise State University can open doors to new opportunities and a brighter future — and we’re here to support you every step of the way. Whether you’re exploring if an online degree is right for you or need help transferring credits, connecting with a student success coach is the perfect first step.
Ready to learn more? Attend one of our online information sessions or contact a student success coach today.
Article by Ranier Lieberman