Security Intern, Threat Operations - Winter 2027
Core
Analyze threat intelligence, run IOC sweeps, develop detection rules, and build orchestration workflows to automate security response.
Role type
Security Intern (Threat Operations)
Builds
Detection-as-code and response-as-code platforms, automated triage and enrichment workflows
Domain
Cybersecurity, Threat Intelligence, Incident Response
Required skills
Threat intelligence analysis, IOC sweeps, detection rule development, orchestration workflow design, API usage, scripting (Python/Go), Git, Terraform, SIEM/SOAR familiarity, MITRE ATT&CK frameworks
Preferred skills
AI tool usage for workflow automation, CTF experience, home labs, security club participation
Technologies
Python, Go, Terraform, Git, SIEM, SOAR, AI tools
Responsibilities
Analyze incoming threat intelligence and assess credibility; run IOC sweeps across the environment; develop and test detection rules and response agents; build orchestration workflows to automate triage and response; join alert triage rotation
Seniority
Intern
