Security Specialist, Intern
Core
Monitor security alerts, perform Tier 1 triage, investigate phishing, and support incident response within an enterprise SOC.
Role type
Intern, SOC Analyst (Tier 1)
Builds
SOC operations, alert triage, incident response, and detection tuning
Domain
Cybersecurity, Security Operations Center (SOC)
Required skills
SIEM, EDR, phishing analysis, log analysis, vulnerability management, MITRE ATT&CK, incident response, networking fundamentals, OS knowledge
Preferred skills
Security certifications (Security+, Network+, CySA+), CTF experience, cloud platforms (AWS/Azure/GCP), compliance frameworks (SOC 2, ISO 27001), ticketing tools (Jira/Confluence)
Technologies
Splunk, Elastic, Microsoft Sentinel, Security Onion, Wireshark, Nmap, Jira, Confluence, ServiceNow
Responsibilities
Monitor security alerts in SIEM/EDR/email/cloud tools; Perform initial triage of alerts (true/false positive); Work SOC ticket queue; Investigate employee-reported phishing emails; Assist with vulnerability management; Tune detections to reduce noise; Review threat intelligence and map to MITRE ATT&CK; Support incident response activities; Create and improve SOC documentation; Complete a capstone project
Seniority
Intern