The program is very solid and has a lot of cool things from my experience (CS with cybersecurity friends). Northeastern has a lot of government recruiting as well as private security recruiting for co-op’s and full time offers - some are even a direct track where one does all of their co-op’s with a government agency and then turns into a full-time job. Private companies are usually better for flexibility.
Academically, the program is of course mostly CS with security/cryptography/networking additions. One of the coolest courses is CS 5770 - Software Vulnerabilities and Security. The class is all about finding exploits in the wild and on specific places and is very hands-on. While listed as a graduate course, undergrads in cybersecurity take the course as early as their fourth semester.
Link: https://wkr.io/courses/2016/spring/cs5770/
The department is very much on the practical side as one might expect, as is the research for the professors in the department.
Does this mean that he will need to apply to be a CS major there?