Asc Cybersecurity Threat & Vulnerability Analyst - Intern/Co-op Conversion 2026-2027

Important Application Submission Information

In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Tuesday, August 11, 2026

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

The Cybersecurity Threat and Vulnerability Analyst is responsible for identifying, analyzing, prioritizing, and eradicating cyber threats and vulnerabilities across the Duke Energy environment. The Analyst will analyze threat information and work closely with peers, other internal/external teams and management to ensure that information is properly dissenimanted to appropriate parties for action. The Analyst assists with supporting tools which perform vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis.  The Analyst also is responsible for following processes and procedures as defined by Cybersecurity leadership and the Threat & Vulnerability Management team.

Additional Preferred Qualifications

• Experience researching and assessing cyber threats and vulnerabilities
• Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)
• Knowledge of cyber intelligence/information collection capabilities and repositories.
• Knowledge of cybersecurity domains, security practices, and cyber defense models, such as the Cyber Kill Chain® methodology & MITRE's ATT&CK Framework®
• Knowledge of telecommunications fundamentals and common networking and routing.
• Knowledge of general networking understanding and/or experience to include Understanding of TCP/IP communications & knowledge of how common protocols and applications work at the network level, including DNS, HTTP, and SMB
• Knowledge of intelligence disciplines
• Knowledge of internal tactics to anticipate and/or emulate threat capabilities and actions
• Ability to utilize multiple intelligence sources across all intelligence disciplines
• Windows and UNIX/Linux command line scripting experience and programming experience (Python, Powershell, etc).
• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on threats and vulnerabilities and provide briefings to various levels of staff / management.
• Ability to function effectively in a dynamic, fast paced environment
• Ability to research independently, multi-task, and meet deadlines under tight timeframes
• Ability to develop and maintain good working relationships with internal and external business partners
• Experience with writing and editing technical documentation and operational procedures
• Experience in developing and improving work processes
• Demonstrated effective problem solving & analytical skills
• Knowledgeable of Duke Energy’s Cybersecurity policies
• Innovative – ability to recognize and seek improvement and efficiency opportunities
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cybersecurity domain. 

Working Conditions

• Office Environment

Travel Requirements

Relocation Assistance Provided (as applicable)

No

Represented/Union Position

No

Visa Sponsored Position

No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility