Risk Advisory Intern – Technical Advisory - Remote (Mexico)

About us: At Echelon Risk + Cyber, we believe in defending basic human rights to security and privacy. If you are a university student in your final three semesters and you're looking to kickstart your career in cybersecurity and consulting, this is the perfect opportunity for you. We are looking for an exceptional Risk Advisory Proactive Incident Response Intern to support the engagements that help organizations prepare for a cyber incident before one happens, and to learn how that preparation is built, tested, and improved.

As a Risk Advisory Proactive Incident Response Intern, you won't just observe. You will help develop the plans, playbooks, and exercises that clients use to detect, respond to, and recover from security incidents. You will learn how incident response readiness connects to risk, compliance, and business continuity, and you will work with colleagues across Echelon's advisory, defensive, and offensive security teams.

At Echelon, we believe learning never stops. You will work on real client engagements with team members who will challenge you with meaningful work. We allow our team members to build from the ground up and make an impact across the organization.

Application Details: This internship is part of our Summer 2027 Internship Program and will run from June 7, 2027, through August 12, 2027. Interns are expected to work approximately 20–25 hours per week throughout the duration of the program. Compensation ranges from $15–$20 USD per hour, depending on relevant experience.

What You Will Do:

• Support the development and review of incident response plans, playbooks, and runbooks aligned to NIST SP 800-61 and client-specific requirements.
• Help design tabletop exercises, including scenario research, injects, discussion questions, and facilitator materials.
• Take notes during exercises and help prepare after-action reports with observations, gaps, and prioritized recommendations.
• Research threat actors and attack techniques, and help map exercise scenarios to the MITRE ATT&CK framework.
• Assist with incident response readiness assessments, including review of existing plans, roles, escalation paths, and communication procedures.
• Help draft and update supporting materials such as contact lists, communication templates, severity matrices, and decision flowcharts.
• Support business continuity and disaster recovery documentation, including business impact analysis inputs and recovery procedures.
• Learn how security tooling such as EDR and SIEM supports detection and response, so that plans reflect how clients actually operate.
• Gather and organize client evidence related to incident response and continuity controls across frameworks such as NIST CSF, ISO 27001, SOC 2, HIPAA, and CMMC.
• Shadow consultants on client calls, exercise planning sessions, and facilitated exercises to learn how engagements are run.
• Participate in internal team meetings to learn engagement planning, risk discussions, and advisory approaches.
• Support thought leadership efforts, such as blog content, threat briefings, and internal knowledge sharing.

Your knowledge, skills, and abilities:

• Strong interest in incident response and cyber preparedness, and a foundational understanding of cybersecurity principles.
• Currently pursuing a degree in IT, Cybersecurity, Computer Science, Business, or a related field.
• Advanced proficiency in English (verbal and written), including the ability to write clear, step-by-step procedures.
• Strong organizational skills to manage multiple projects and priorities.
• Attention to detail and strong analytical and problem-solving skills.
• Curiosity about how attacks unfold and how organizations detect and contain them.
• Excellent communication skills, with the ability to tailor messages for technical and executive audiences.
• Comfort working independently in a remote-first, multinational team.
• Aspiration to work in the cybersecurity industry within the next two years.
• Availability to work a minimum of 20 hours per week (8 AM-5 PM CST, Monday-Friday).
• English Advanced C1/C2
• Applicants must have authorization to work in Mexico without current or future visa sponsorship.
• Only resumes in English will be considered.

Preferred qualifications:

• Familiarity with incident response lifecycles (such as NIST SP 800-61), the MITRE ATT&CK framework, or the Cyber Kill Chain.
• Exposure to security operations concepts such as SIEM, EDR, log analysis, or threat intelligence.
• Internship, academic project, competition (for example a CTF or cyber defense exercise), or coursework related to incident response, digital forensics, or business continuity.
• Exposure to security or risk frameworks such as NIST, ISO 27001, CIS, or SOC 2.
• Interest in presenting or facilitating, and comfort with PowerPoint and Word for exercise materials.

Why Echelon?

We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality" and we want to allow you the space to bring your full self to work.

We currently offer the following benefits:

• Hands-On Experience: Work alongside industry experts on real client engagements that help organizations reduce cyber risk.
• Mentorship: Receive guidance from seasoned professionals who are dedicated to your growth and success.
• Innovative Environment: Be part of a forward-thinking team that values new ideas and encourages creative problem-solving.
• Career Advancement: Gain exposure to a range of cybersecurity and risk management practices, opening doors to future career opportunities.
• Collaborative Culture: Join a supportive community where teamwork and knowledge-sharing are at the heart of everything we do.

We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.