InfoSec Architects: Building and Battling in Cybersecurity with Microsoft

Students in the Commonwealth’s Cyber Initiative (CCI) network can apply to gain mentored work experience with Microsoft while earning a stipend of $25 an hour during the fall 2024 semester.

Five students will be selected to partner with Microsoft Cloud and Cybersecurity subject matter experts (SMEs) to build a simulated enterprise cloud environment to conduct cybersecurity operations. 

Students will learn about modern cloud environments and cloud-focused cybersecurity operations to enhance their studies, gain work experience, and add to their skills in cloud-based technologies. 

The project is part of CCI’s mission of Workforce Development.

What You’ll Do

Participants will build out an Azure-hosted infrastructure and generative artificial intelligence (Gen AI) architecture designed by Microsoft. 

The architecture’s configuration will be aligned to enable cloud capture-the-flag (CTF) goals generated by Microsoft and objectives identified by the students. 

Students who are selected will get access and credits to Azure to:

• Build a cloud-based enterprise architecture.
• Build a Gen AI architecture.
• Understand cybersecurity threats within a cloud environment.
• Build learning modules that support cloud CTF objectives.
• Conduct threat emulation on cloud and emerging technologies, such as Gen AI, to identify potential vulnerabilities.

Microsoft will provide:

• Mentors to direct the student team.
• An Azure architectural diagram.
• Capture-the-flag objectives.

When the build is complete, participants will conduct capture-the-flag activities to reach goals that Microsoft and students identify and define.

Participants will generate:

• Infrastructure as code files of the Azure design and configuration.
• Instructional modules that support CTF objectives.
• Summary documentation on what students have learned, their experiences, and potential threat vectors.

What You’ll Get

Participants will:

• Receive a stipend of $25 per hour.
• Have the opportunity to work on real-world cybersecurity scenarios/projects.
• Receive mentorship from Microsoft staff.
• Enhance their soft skills.
• Network with students, faculty, and Microsoft employees.

Eligibility

To be considered for the project, you must:

• Be a U.S. citizen.
• Be studying at a Commonwealth’s Cyber Initiative (CCI) network institution of higher education.
• Have completed one year in a college or university.
• Have declared a major in cyber or cyber-related field.
• Commit to staying in the program from Sept. 3 to Dec. 20, 2024.
• Attend the virtual project kickoff meeting on Sept. 4, 2024.
• Be enrolled in a Commonwealth’s Cyber Initiative (CCI) network institution of higher education during the duration of the project
• Be enrolled in cyber or cyber-adjacent courses and demonstrate an interest in cybersecurity (e.g., Hack the Box or other online CTF-style activities, have a home lab, be in a cyber club, etc).

Participant Requirements

If selected for this program, you must:

• Work on the project starting Sept. 3, 2024.
• Work on the program for a minimum of two to four hours a week from Sept. 3 to Dec. 20, 2024. 
• Meet weekly on Fridays with Microsoft (meetings will be scheduled in advance and might be in person at the Microsoft headquarters in Reston, Va., or virtually). The meeting time will be determined with a student poll. Everyone must attend.
• Participate in project-related tasks.
• Provide your own computer or laptop. 
• Inform your university/college advisor of project participation.
• Provide CCI with your advisor’s name, title, and email.

Expectations and Repercussions

This is a professional opportunity, and you’re expected to conduct yourself in a manner befitting a professional environment.

You’ll be held accountable for attending meetings and actively participating in project-related tasks. Failure to meet these expectations could result in your dismissal and forfeiture of your stipend. You must:

•  Attend 90 percent of mandatory meetings.
• Participate in project-related tasks.

If you don’t meet participation requirements, your advisor will be notified once via email that you’re in danger of being dismissed from the program. Failure to resolve attendance and participation issues will result in your dismissal, and you and your advisor will be notified.

Participate in CCI’s Project-Based Learning Program

If you're interested in seeing this program at your school or sponsoring such a program at your company, please contact Sarah Hayes at sshayes@vt.edu.