At Insmed, every moment and every patient counts — and so does every person who joins in. As a global biopharmaceutical company dedicated to transforming the lives of patients with serious and rare diseases, you’ll be part of a community that prioritizes the human experience, celebrates curiosity, and values every person’s contributions to meaningful progress. That commitment has earned us recognition as Science magazine’s No. 1 Top Employer for five consecutive years, certification as a Great Place to Work® in the U.S., and a place on The Sunday Times Best Places to Work list in the UK.
For patients, for each other, and for the future of science, we’re in. Are you?
About the Role:
We’re looking for a Summer Intern - Cybersecurity Operations & AI Automation on the Information Technology Team to help us expand what’s possible for patients with serious diseases.
The Insmed Summer Internship Program is designed to give you more than just a glimpse into the pharmaceutical industry—it’s a chance to make a real impact. Over the course of the summer, you’ll gain hands-on experience, contribute to meaningful team projects, and learn directly from skilled professionals who are invested in your growth.
Our 2027 Summer Intern program is a full-time (40 hours per week), 12-week, paid internship. The internship may present opportunities for rotational assignments within the function, and the intern will be assigned goals and objectives that will support the strategic business plan of the company.
What You'll Do:
In this role, you'll help build AI-driven automation that transforms how Insmed's cybersecurity team reports and prioritizes vulnerabilities — while gaining hands-on experience in how an enterprise security department operates.
You'll also:
Develop and test Model Context Protocol (MCP) server integrations that connect AI assistants to security tools — including vulnerability scanners, ticketing systems, and SIEM platforms — to automate data collection and reporting.
Analyze vulnerability scan data and prioritize risk using industry frameworks and sources such as CVSS, EPSS, and the CISA Known Exploited Vulnerabilities (KEV) catalog.
Create clear, audience-specific reports, including remediation lists for asset owners and trend summaries for leadership.
Support day-to-day security operations, including alert triage, log review, and phishing analysis.
Gain exposure to enterprise security tools spanning vulnerability management, endpoint protection, identity, and cloud security.
Collaborate cross-functionally with team members across SecOps, Vulnerability Management, GRC, and IAM to understand how each function contributes to protecting the organization.
Who You Are:
You are a current student working on a Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
You are or you have:
A solid foundation in cybersecurity concepts, including common vulnerabilities, threats, risk, and networking fundamentals (TCP/IP, DNS, ports and protocols).
Programming experience in Python, including working with REST APIs and JSON data.
Familiarity with AI and large language model concepts, such as prompting, tool or function calling, and AI agents.
Curious and eager to learn new tools quickly, with strong problem-solving skills.
Strong written and verbal communication skills, with the ability to explain technical findings to non-technical audiences.
Nice to have (but not required):
Progress toward or completion of a security certification (e.g., CompTIA Security+, ISC2 CC, Google Cybersecurity Certificate).
Hands-on experience with MCP, LangChain, or similar AI agent and integration frameworks.
Exposure to vulnerability management, SIEM, or EDR tools through coursework, home labs, CTFs, or prior internships, along with familiarity with frameworks such as NIST CSF or MITRE ATT&CK.
Where You’ll Work
This is a hybrid role based out of our Bridgewater, NJ office. You’ll work remotely most of the time, with…