Cyber Resilience & Product Security Intern

Session: Summer 2027
Location: Michigan City, IN (On-Site)
Duration: May-August 2027 (Full-Time)

About the Company
DwyerOmega is a globally trusted leader in manufacturing innovative instrumentation solutions for the Process Measurement, Automation, Control and HVAC markets. With very strong brand recognition and high levels of customer loyalty, DwyerOmega has an unmatched reputation for providing customized solutions that meet and exceed customer needs. Our team of engineering experts help our customers select technical, and often configured, product solutions for their unique applications.

What You’ll Do

This internship will focus on reviewing the digital elements of products, supporting risk assessments, developing technical documentation, and assisting with European Union (EU) Cyber Resilience Act (CRA) compliance efforts and governance framework development.

This is an excellent opportunity for a student or early career professional interested in cybersecurity, product security, regulatory compliance, and embedded/digital systems within industrial products.

Essential Job Functions

1. Product Digital Element Review

• Analyze and document digital components within DwyerOmega products (firmware, software, connectivity features, embedded systems, cloud interfaces, etc.).
• Identify potential cybersecurity risks associated with product digital elements.
• Support vulnerability identification and mitigation tracking.
• Assist engineering teams in documenting product security architectures.

2. Risk Assessment & Documentation

• Conduct structured cybersecurity risk assessments for products.
• Support threat modelling and risk classification activities.
• Develop and maintain: Technical security documentation, Risk registers, Security requirement traceability documentation, Compliance evidence artifacts.

3. Cyber Resilience Act (CRA) Support

• Assist with gap analysis against CRA requirements.
• Support development of compliance documentation aligned with CRA obligations.
• Help organize product cybersecurity technical files.
• Contribute to secure development lifecycle documentation.

4. Governance & Framework Support

• Assist in developing and refining cyber governance frameworks.
• Support internal cybersecurity policies and procedures documentation.
• Help define product security controls aligned with industry standards (e.g., NIST CSF, ISO 27001, IEC 62443 where applicable).
• Support internal audit preparation and evidence gathering.