Intern, Incident Response

At CN, we are committed to our pursuit of excellence. We take pride in delivering work of the highest standard, continually innovating to shape the railroad of the future. As responsible railroaders, we make the right decisions every time, putting safety first, acting with unwavering integrity, and holding ourselves accountable for our actions. We believe in succeeding together—by fostering inclusivity and collaboration, we sustainably deliver exceptional results for our customers. We welcome students aboard to join our team and play a valuable role in the engine that keeps the North American economy on track. Expect an exciting environment where you’ll be encouraged to learn, grow, and be recognized for your unique ideas and contributions. Work on pivotal projects with experienced collaborators who will encourage you to share your perspectives, and thrive in our close-knit, safety-focused culture. The careers we offer are meaningful because the work we do matters. Join us and get your career moving!

Canadian National Railway Company (CN) is looking for a highly motivated person to fulfill a full-time (40h/week) Intern, Incident Response position in Montreal, QC from May - Aug 2025.

Job Summary

The Intern, Incident Response (IR) is responsible for carrying out tasks related to incident response, critical event management, and data analysis to protect and maintain the overall security of the organization. The incumbent builds effective relationships with key stakeholders who own and support Information and Technology (I&T) infrastructure, applications, processes, and operations to ensure CN’s risk is reduced. The Security Operation Center (SOC) team members handle IR, Vulnerability Management, E-mail Security, End Point Security, Threat Hunting, and Forensics. The tasks include researching, analyzing, resolving, communicating, and coordinating activities for all emerging security issues.

Major Responsibilities

• Provide IR support when analysis confirms an actionable incident
• Handle cases and tickets according to service levels and communicate effectively
• Perform event and alert validation to reduce and eliminate false positive findings
• Perform event and alert triage to prioritize events of interest for further analysis
• Research and analyze events to define the classification, correlation, and root cause of problems

Requirements

• Knowledge of security methodologies and processes
• Knowledge of protocol analysis tools such as Wireshark and TCPDUMP to perform troubleshooting
• Advanced knowledge of core security technologies such as Firewalls, IDS, IPS, AntiVirus, TCP, and IP Suite
• Ability to perform incident response and identify potential compromises to customer networks through data analysis
• Knowledge of first-line response and initial management for new or developing I&T security related issues

Education

• Working towards a Bachelor’s Degree in Computer Science or Information Systems

About CN

CN is a world-class transportation leader and trade-enabler. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. As the only railroad connecting Canada’s Eastern and Western coasts with the Southern tip of the U.S. through a 19,500 mile rail network, CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN is committed to programs supporting social responsibility and environmental stewardship. At CN, we work as ONE TEAM, focused on safety, sustainability and our customers, providing operational and supply chain excellence to deliver results.

At CN, we are dedicated to building North America’s safest, most inclusive and sustainable railroad, which includes reflecting the communities in which we operate. Research shows that candidates from underrepresented groups often don’t apply unless they feel they fit the job posting at 100%. Even if you don’t see yourself in every job requirement listed in a posting, we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations), please reach out to our team at [email protected].

As an equal employment opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, and other protected status as required by applicable law. We thank all applicants for their interest, however, only candidates under consideration will be contacted. Please monitor your email on a regular basis, as communication is primarily made through email.