Intern - Assurance, Forensic - Cyber Investigations (Jan - June 2027)

About the role

EY's Forensic Technology team, part of the Forensic & Integrity Services practice, offers digital forensic investigations and eDiscovery services. This internship runs from January to June 2027 and supports the lab and clients in forensic analysis, eDiscovery and cyber response.

Key responsibilities

• Support the collection, processing and management of large sets of digital evidence (communications, documents and records).
• Support digital forensic analysis and reporting from the lab and/or client site.
• Support investigations with Forensic and eDiscovery technology and document work papers, schedules and reports.
• Support the deployment of eDiscovery solutions and the resolution of client requests during the review stage.
• Assist in cyber response and cyber-attack investigations, including root cause analysis of compromised machines.
• Develop and document new procedures and workflows, and use industry-standard software to build custom solutions.

Required profile

• Background in Computer Science, IT, Cyber Security or a related field.
• Solid knowledge of IT infrastructure and security topics.
• Ideally, a digital forensics or eDiscovery certification (e.g. EnCE, CCE, GCFE, GSE, OSCP, CEH, CHFI) or working towards one.
• Experience in complex investigations, evidence seizure, chain of custody and data collection.

Required skills

• Host, network and cloud forensics (Windows, Unix, Mac, mobile OS); log correlation and analysis.
• Tools such as EnCase, Cellebrite, Axiom, Oxygen Forensics, Relativity, Nuix, Splunk, Wireshark, ELK, Azure Sentinel, SIFT Workstation, Volatility.
• Incident response, threat intelligence and malware analysis.

What we offer

• Continuous learning and coaching.
• A flexible, diverse and inclusive culture.

Candidates must upload their latest resume and academic transcripts with the online application; only shortlisted candidates will be contacted.