Summer Associate Internship (Application Whitelisting Security Analyst)

d cross-functional collaboration with IT and security teams.

Potential Project:

As a Summer Associate, you may contribute to the following initiatives:

• Analyze and categorize application data from tools such as Microsoft Defender, Black Duck, and Checkmarx to identify inconsistencies and build a centralized whitelisting inventory.

• Design and automate reporting mechanisms for whitelisting status, risk scores, and ownership to improve visibility and decision-making.

• Collaborate with ServiceNow and CMDB teams to validate data ingestion, resolve discrepancies, and align with enterprise architecture standards.

• Support attestation workflows and governance discussions to ensure whitelisting policies align with enterprise standards and reduce risk exposure.

• Develop scripts and APIs to automate data integration and streamline inventory maintenance.

• Present findings, process improvements, and recommendations to leadership, contributing to the formalization of the whitelisting service.

The Summer Associate Program is a 12-week internship running from May to August 2026. Interns will work on meaningful projects that contribute to NFCU's mission while gaining hands-on experience in cybersecurity and enterprise technology. To qualify, applicants must be currently enrolled in an accredited college or university and have an anticipated graduation date of December 2026 or later.

Responsibilities

• Identify and reconcile inconsistencies in application metadata across multiple enterprise tools and repositories.

• Apply analytical techniques to detect anomalies and fill gaps in whitelisting-related data.

• Engage with business and technical owners to validate application ownership and compliance.

• Use scripting and automation to streamline data preprocessing and ensure real-time updates to the whitelisting inventory.

• Contribute to governance discussions to align whitelisting practices with enterprise policies.

• Ensure accurate classification of applications (e.g., SaaS, Third-Party, Custom) and maintain structured tagging based on risk and certification status.

• Assist in refining questionnaires and validation processes for custom/homegrown applications.

• Communicate findings and recommendations to stakeholders to support informed decision-making.

Qualifications

Experience: Total Professional Experience 5+ years of which Information Technology Experience is 3+ years and at least 1 year Security Experience

Required:

• Currently pursuing a degree in Cybersecurity, Information Systems, Computer Science, or a related field.

• Strong analytical and problem-solving skills.

• Excellent communication and collaboration abilities.

• Familiarity with general IT concepts and business processes.

• Proficiency in Microsoft Office tools.

Preferred:

• Exposure to scripting languages such as Python or PowerShell.

• Familiarity with application security tools (e.g., Microsoft Defender, Black Duck, Checkmarx).

• Experience with data analysis or reporting tools (e.g., SQL, Excel, or analytics platforms).

• Understanding of ServiceNow and CMDB concepts.

• Interest in process automation and enterprise security governance.

• Knowledge of software development methodologies (e.g., Agile, DevOps, SDLC) is a plus.

Hours: Monday - Friday 8:00AM - 4:30PM EST

Location:
Remote position if candidate is not local to one of the sites listed below for hybrid work:
820 Follin Lane, Vienna, VA 22180
5550 Heritage Oaks Dr Pensacola, FL 32526

About Us
Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• Fortune 100 Best Companies to Work For 2025

• Yello and WayUp Top 100 Internship Programs

• Computerworld® Best Places to Work in IT

• Newsweek Most Loved Workplaces

• Fortune Best Workplaces for Women ™ 2024

• 2025 PEOPLE® Companies That Care

• Newsweek Most Trustworthy Companies in America

• Military Times 2024 Best for Vets Employers

• Best Companies for Latinos to Work for 2025

• Forbes® 2025 America's Best Large Employers

• Forbes® 2025 America's Best Employers for New Grads

• Forbes® 2025 America's Best Employers for Tech Workers

• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence

• Military.com Top Military Spouse Employers 2025

• 2025 Handshake Early Talent Award

From Fortune . ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.

Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.