Fall 2026 IT Intern (Triage Analyst)

The Administrative Office (AO), an agency of the judicial branch of the federal government, is committed to serving and supporting the federal court system of the United States. The AO provides a broad range of legislative, legal, financial, technology, management, administrative and program support services to the federal courts.OPPORTUNITY: The AO is seeking applicants for its Student Internship Program. The opportunity is intended to provide valuable work experience and prepare students interested in a public service career. The AO is looking for student interns with backgrounds and/or demonstrated interest in the following areas: human resources, public affairs, law, business administration (marketing, budget, accounting, etc.), and information technology. The student intern will have an opportunity to improve his or her writing, research, analytical, logical, multi-tasking, and customer service skills. Additionally, student interns are provided with several networking opportunities with fellow interns, agency employees, and other government employers. This specific internship will be in the Department of the Chief Information Office (DCIO), Information Technology Security Office (ITSO). This role supports 24x7x365 cybersecurity operations. This role is responsible for aggregating cybersecurity alerts across the previous 24-hour period for trend analysis and enhanced understanding of the threat landscape.Duties include, but are not limited to: Conducting thorough analysis of network, endpoint, and application logs to identify and assess intrusions, determine their impact, and implement appropriate containment strategies to mitigate threats. Performing network forensics from log files and packet captures, which includes working hand in hand with the affected parties to obtain the data needed to accurately (re)construct incident timelines and to perform the analysis required to understand the attack vectors and associated impact. Performing endpoint forensics to include but not limited to: volatile memory analysis, log files analysis, disk analysis, user behavioral analysis and data integrity analysis. Performing malware analysis to disassemble and reverse engineer potential malware Identifying indicators of compromise from digital forensic and malware samples for more effective intrusion prevention and detection.