Vulnerability Management Intern at HarbourVest Partners in Boston

Summary: HarbourVest Partners is a global firm committed to delivering impactful solutions to clients and investing partners. They are seeking a Vulnerability Management Intern to support infrastructure, application, and business teams in identifying, assessing, and remediating vulnerabilities across the enterprise, while gaining hands-on experience in the vulnerability lifecycle. Responsibilities: - Support vulnerability scanning activities across infrastructure, applications, containers, and cloud environments - Assist with risk assessments and help prioritize vulnerabilities based on CVSS scores, threat intelligence, and business context - Help maintain and configure vulnerability management platforms under the mentorship of senior engineers - Assist in the response to high-profile vulnerabilities (e.g., zero-days, critical CVEs), contributing to impact analysis and remediation coordination - Help track enterprise-wide SLA compliance for vulnerability remediation across asset classes - Assist in analyzing SLA trends and identifying non-compliance patterns - Support the maintenance of dashboards and reporting mechanisms to deliver actionable insights for security teams - Assist with incident response activities, including detection, containment, eradication, and recovery efforts - Contribute to the improvement of incident response playbooks and documentation - Stay informed on industry trends, tools, and guidelines in vulnerability management and incident response Required Qualifications: - Currently pursuing a Bachelor's degree in Computer Science, Information Security, Engineering, or a related field - Foundational understanding of cybersecurity concepts, vulnerability management, or incident response - Basic familiarity with cloud platforms (AWS, Azure) and/or container environments - Strong problem-solving skills, flexibility, and the ability to take initiative - Superb communication skills and the ability to work cross-functionally with Engineering, Product, and DevOps teams - Eagerness to learn vulnerability scanning technologies, CVSS scoring, and threat modeling Preferred Qualifications: - Exposure to compliance frameworks and standards - Any relevant certifications (e.g., CompTIA Security+, CEH, or similar) - Currently enrolled in a BS program in Computer Science, Information Security, or equivalent - Prior internship, coursework, or lab experience in cybersecurity - Hands-on experience with security tools or CTF competitions Required Skills: Cybersecurity, Vulnerability management, Incident response, Vulnerability scanning, CVSS scoring, Threat intelligence, Risk assessment, Cloud platforms - AWS, Cloud platforms - Azure, Container environments, CompTIA Security+, Certified Ethical Hacker (CEH) Benefits: This position will be a hybrid work arrangement. You will receive 18 remote workdays per quarter to use at your discretion, subject to manager approval.