Cybersecurity Operations Intern

Job Title: Cybersecurity Operations Intern

Location: Radnor, PA


Job Type: Hybrid

Reporting to: Cybersecurity Manager

Director Reports: N/A

Employment Type: Summer Paid Internship - 40 hours/week - 13 weeks

Company Overview: FXI is a leading producer of foam innovation in the Bedding, Furniture, Industrial, Home & Office, Healthcare, and Transportation markets. We have made it our mission to provide tailored solutions that delight our customers and consumers. With our corporate headquarters, high-tech research and development facility, and multiple manufacturing locations in North America, FXI has built a culture of innovation and achievement that is recognized by customers, suppliers and peers. Our products include finished goods, sub-assemblies, services, and raw materials for OEMs, fabricators, and retailers. You will find FXI's foam innovations inside, around, and under yourself in countless applications. Everywhere foam goes, FXI's innovations lead the way! Won't you join us?

Job Overview: FXI is seeking a motivated, detail-oriented Cybersecurity Operations Intern to join our IT Cybersecurity team. In this hands-on role, you will work alongside experienced security professionals and contribute directly to real-world security operations from day one. Responsibilities will include monitoring live alert queues, triaging security detections, supporting vulnerability management activities, and helping strengthen FXI's security posture across both corporate and manufacturing environments.


As part of the team, you will play an important role in supporting the continued growth of FXI's cybersecurity capabilities while gaining exposure to enterprise-grade security tools, real incident response workflows, and cross-functional collaboration with IT, operations, and plant teams.

Key Responsibilities:

SIEM Monitoring & Alert Triage

• Monitor the SIEM alert queue daily; categorize and prioritize detections by severity.
• Perform first-pass investigation of low-to-medium severity alerts - correlating log sources, reviewing asset context, and documenting findings.
• Identify recurring false positives and escalate tuning recommendations to improve detection accuracy.
• Maintain and update triage runbooks for common alert types.
• Track alert volume, triage disposition, and mean-time-to-triage (MTTT) metrics on a weekly basis.

Vulnerability Management

• Aggregate and normalize vulnerability scan outputs into actionable, prioritized lists.
• Tag findings by system owner, site, and remediation status; manage patching workflows
• Track Patching progress and follow up with system owners on outstanding items.

Asset & Identity Hygiene

• Reconcile device inventories across sites; identify rogue or unmanaged devices and flag coverage gaps.
• Analyze user accounts, conduct group membership reviews, and prepare actionable remediation lists.

Security Awareness & Phishing Operations

• Help plan and execute phishing simulation campaigns across the organization.
• Respond to and investigate unresolved phish reports from end users.
• Compile participation metrics and build dashboard reports

OT (Operational Technology) Security Reporting

• Maintain plant-level vulnerability and device inventories. Prepare summary reports for site leadership.
• Assist plant staff in identifying and prioritizing OT security risks.

Skills / Qualifications:

• Currently pursuing or recently completed a bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, ideally as a junior or senior.
• Foundational understanding of network protocols, firewalls, operating systems (Linux/Windows), and cybersecurity principles.
• Procedures for detecting, containing, eradicating, and recovering from security incidents, including incident response lifecycles and reporting.
• Strong analytical and problem-solving skills with attention to detail.
• Effective written and verbal communication skills - you'll be writing runbooks, reports, and escalation summaries regularly.
• A genuine interest in cybersecurity and eagerness to learn in a fast-paced environment.
• Familiarity with SIEM platforms (Slpunk, Microsoft Sentinel, or similar), EDR tools, and ticketing systems preferred.
• Relevant course work, certification, and interest in OT/ICS security is a plus.

What You'll Gain:

• Hands-on experience with enterprise security tools including SIEM, EDR, Vulnerability Management, and Identity protection
• Direct exposure to real-world SOC operations - alert triage, incident escalation, and threat investigation workflows.
• Experience supporting OT/ICS security in a multi-site manufacturing environment.
• Understanding of compliance and audit readiness processes in a corporate cybersecurity program.

Our Commitment to a Diverse Workforce: FXI is an Equal Opportunity Employer. FXI does not discriminate in employment matters on the basis of race, color, religion, gender identity or expression, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, or based on any individual's membership in any group or class protected by applicable federal, state, or local laws. We support workplace diversity. We strongly believe that diversity contributes to a broader collective perspective that will consistently lead to a better company and better products. We are working hard to increase the diversity of our team wherever we can.

We are interested in every qualified candidate who is eligible to work in the United States. However, we are not able to sponsor visas.

FXI is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at FXI via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of FXI. No fee will be paid in the event the candidate is hired by FXI as a result of the referral or through other means.