Fall 2026 IT Intern (Digital Forensic Analyst)
What you'd do
The Administrative Office (AO), an agency of the judicial branch of the federal government, is committed to serving and supporting the federal court system of the United States. The AO provides a broad range of legislative, legal, financial, technology, management, administrative and program support services to the federal courts.
Major duties
OPPORTUNITY: The AO is seeking applicants for its Student Internship Program. The opportunity is intended to provide valuable work experience and prepare students interested in a public service career. The AO is looking for student interns with backgrounds and/or demonstrated interest in the following areas: human resources, public affairs, law, business administration (marketing, budget, accounting, etc.), and information technology. The student intern will have an opportunity to improve his or her writing, research, analytical, logical, multi-tasking, and customer service skills. Additionally, student interns are provided with several networking opportunities with fellow interns, agency employees, and other government employers. All AO internships are onsite at the Thurgood Marshall Federal Judiciary Building in Washington, DC. Telework is not permitted. This specific internship will be in the Department of the Chief Information Office (DCIO), Information Technology Security Office (ITSO). The candidate will analyze digital forensic images to definitively validate what occurred on the device in support of cybersecurity incident response. Duties include, but are not limited to: Conducting thorough analysis of network, endpoint, and application logs to identify and assess intrusions, determine their impact, and implement appropriate containment strategies to mitigate threats. Performing network forensics from log files and packet captures, which includes working hand in hand with the affected parties to obtain the data needed to accurately (re)construct incident timelines and to perform the analysis required to understand the attack vectors and associated impact. Performing endpoint forensics to include but not limited to: volatile memory analysis, log files analysis, disk analysis, user behavioral analysis and data integrity analysis. Performing malware analysis to disassemble and reverse engineer potential malware. Identifying indicators of compromise from digital forensic and malware samples for more effective intrusion prevention and detection. Participating in activities to detect, investigate and analyze lateral movement, threat persistence and follow on activities by threat actors to harm the Judiciary.
What you need to qualify
All students in the Volunteer Student Internship Program must be enrolled or accepted for enrollment as a degree-seeking student, taking at least a half-time academic or technical course load in an accredited 2 year or 4 year program, or in a post-secondary level program. Students must also be in good academic standing, maintaining a GPA of 3.0 or higher. Additional Qualification Requirements: In addition to meeting the BASIC QUALIFICATIONS REQUIREMENTS, applicants must also: Work well in a team environment. Have strong organization and communication skills and be detailed oriented. Have a working knowledge of computer applications such as Microsoft Word, Microsoft Excel, or WordPerfect. Have excellent writing, reading, and interpersonal skills. Be able to organize a variety of assignments simultaneously and meet tight deadlines. The ideal candidate is an undergraduate or graduate student in Cybersecurity. The Student Internship Program requires all participants to be an active student. Therefore, seniors graduating at the end of the current semester will not be considered unless they are continuing to pursue advanced studies as a degree-seeking student at the beginning of the next semester.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.