Intern, Incident Response

At CN, we are committed to our pursuit ofexcellence. We take pride in delivering work of the highest standard,continually innovating to shape the railroad of the future. As responsiblerailroaders, we make the right decisions every time, putting safety first,acting with unwavering integrity, and holding ourselves accountable for ouractions. We believe in succeeding together-by fostering inclusivity andcollaboration, we sustainably deliver exceptional results for ourcustomers.
We welcome students aboard to join our team andplay a valuable role in the engine that keeps the North American economy ontrack. Expect an exciting environment where you'll be encouraged to learn,grow, and be recognized for your unique ideas and contributions. Work onpivotal projects with experienced collaborators who will encourage you to shareyour perspectives, and thrive in our close-knit, safety-focused culture. Thecareers we offer are meaningful because the work we do matters. Join us and getyour career moving!

Canadian National Railway Company (CN) is looking for a highly motivated person to fulfill a full-time (40h/week) Intern, Incident Response position in Montreal, QC from May - Aug 2025.
Job Summary
The Intern, Incident Response (IR) is responsible for carrying out tasks related to incident response, critical event management, and data analysis to protect and maintain the overall security of the organization. The incumbent builds effective relationships with key stakeholders who own and support Information and Technology (I&T) infrastructure, applications, processes, and operations to ensure CN's risk is reduced. The Security Operation Center (SOC) team members handle IR, Vulnerability Management, E-mail Security, End Point Security, Treat Hunting, and Forensics. The tasks include researching, analyzing, resolving, communicating, and coordinating activities for all emerging security issues.
Major Responsibilities
• Provide IR support when analysis confirms an actionable incident
• Handle cases and tickets according to service levels and communicate effectively
• Perform event and alert validation to reduce and eliminate false positive findings
• Perform event and alert triage to prioritize events of interest for further analysis
• Research and analyze events to define the classification, correlation, and root cause of problems
Requirements
• Knowledge of security methodologies and processes
• Knowledge of protocol analysis tools such as Wireshark and TCPDUMP to perform troubleshooting
• Advanced knowledge of core security technologies such as Firewalls, Information Display System (IDS), Intrusion Prevention System (IPS), AntiVirus, Transmission Control Protocol (TCP), and Internet Protocol (IP) Suite
• Ability to perform incident response and identify potential compromises to customer networks through data analysis
• Knowledge of first-line response and initial management for new or developing I&T security related issues
Education
• Working towards a Bachelor's Degree in Computer Science or Information Systems

About CN

CN is a world-class transportationleader and trade-enabler. Essential to the economy, to the customers, and tothe communities it serves, CNsafely transports more than 300 million tons of natural resources, manufacturedproducts, and finished goods throughout North America every year. As the only railroad connectingCanada's Eastern and Western coasts with the Southern tip of the U.S. through a19,500 mile rail network, CN and its affiliates have been contributingto community prosperity and sustainable trade since 1919. CN is committed toprograms supporting social responsibility and environmental stewardship. AtCN, we work as ONE TEAM, focused on safety, sustainability and our customers,providing operational and supply chain excellence to deliver results.
At CN, we are dedicated to building North America's safest, most inclusive and sustainable railroad, which includes reflecting the communities in which we operate. Research shows that candidates from underrepresented groups often don't apply unless they feel they fit the job posting at 100%. Even if you don't see yourself in every job requirement listed in a posting, we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations), please reach out to our team at [email protected].
As an equal employment opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, and other protected status as required by applicable law. We thank all applicants for their interest, however, only candidates under consideration will be contacted. Please monitor your email on a regular basis, as communication is primarily made through email.