The Team: The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality and integrity of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.
The Role: Morningstar`s Information Security department is looking for an Information Security Intern to join our team. As the Information Security Intern, you will fill an exciting new role that focuses on application and network penetration test activities. This part-time internship requires 15-20 hours per week and is based in our Chicago office.
+ Identify common application security vulnerabilities (e.g., OWASP Top 10) and offer inventive resolutions.
+ Work directly with the information security officer and various internal groups to communicate risk and help solve issues.
+ We`re looking for someone who enjoys breaking code, solving puzzles, and diagnosing problems.
+ Excellent communication skills and an understanding of application security fundamentals.
+ Candidates should be interested in the latest security trends, as well as enjoy performing code reviews and penetration test activities.
+ Experience with fuzzing tools, network traffic analyzers, Burp, Paros, Nessus, and WebInspect is a plus.
+ Must be enrolled in a degree program, preferably with an information security or technical focus.
Morningstar is an equal opportunity employer.