Cybersecurity Intern

About the role

Join the Cyber Defense team as a Cybersecurity Intern and gain hands‑on experience in daily security operations, SIEM migration, and enterprise threat monitoring. You will work closely with senior analysts, supporting both the transition from Splunk to SecOps and routine SOC activities.

Key responsibilities

• Assist in validating log sources and migrating use cases during the SIEM transition (Splunk → SecOps).
• Support alert comparison, data quality checks, and documentation of detection logic and dashboards.
• Participate in post‑migration tuning, stabilization, and continuous improvement activities.
• Conduct daily security monitoring, alert triage, enrichment, and basic investigations under analyst supervision.
• Review logs from endpoints, servers, network, and cloud tools; maintain SOC runbooks and playbooks.
• Track incidents, false positives, and trends; perform basic threat‑intelligence research.
• Prepare incident summaries and operational reports.
• Support periodic reviews of alerts, dashboards, and detection effectiveness, as well as access reviews and tool health checks.

Required profile

• Currently pursuing a Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications, or a related field.
• Basic understanding of SIEM concepts, cyber‑attack techniques, and SOC fundamentals.
• Strong analytical mindset, attention to detail, and willingness to learn.

Required skills

• SIEM concepts (logs, alerts, correlation)
• Familiarity with Splunk, Elastic, Microsoft Sentinel or other SIEM tools
• Knowledge of EDR/XDR platforms such as CrowdStrike or Microsoft Defender
• Networking basics (TCP/IP, DNS, HTTP)