Cyber Security Intern

About the Role

We are hiring a skilled and motivated Cyber Security professional on behalf of one of our clients for a remote opportunity. The ideal candidate will have a strong understanding of cybersecurity principles, threat detection, vulnerability management, and security operations. The candidate should be capable of identifying security risks, investigating potential threats, and implementing effective measures to protect systems, networks, applications, and sensitive information.

Key Responsibilities

• Monitor security alerts, system logs, and network activities to identify suspicious behaviour and potential security incidents.
• Investigate security incidents, determine their root causes, and coordinate appropriate response and remediation activities.
• Perform vulnerability assessments and security scans to identify weaknesses in systems, applications, and network infrastructure.
• Analyse security events using Security Information and Event Management (SIEM) tools.
• Support incident response activities, including threat identification, containment, eradication, and recovery.
• Conduct threat intelligence analysis to understand emerging cyber threats, attack techniques, and vulnerabilities.
• Implement and maintain security controls to protect endpoints, servers, networks, and cloud environments.
• Assess firewall configurations, intrusion detection systems, and intrusion prevention systems to identify potential security gaps.
• Conduct risk assessments and recommend mitigation strategies to reduce organizational cybersecurity risks.
• Monitor endpoint detection and response (EDR) systems to identify and investigate suspicious activities.
• Support identity and access management processes, including access reviews, authentication policies, and privileged access controls.
• Assist in implementing multi-factor authentication (MFA), least-privilege access, and secure authentication mechanisms.
• Review system configurations and security policies to ensure compliance with organizational standards.
• Conduct security assessments of applications, infrastructure, and cloud-based environments.
• Analyse phishing emails, suspicious attachments, and potentially malicious URLs to identify security threats.
• Support malware analysis and investigation of potentially compromised systems.
• Perform security audits and assist in identifying gaps in existing security practices.
• Collaborate with IT, infrastructure, development, and compliance teams to address security vulnerabilities.
• Assist with penetration testing activities and coordinate remediation of identified findings.
• Maintain incident reports, security documentation, investigation records, and vulnerability registers.
• Support patch management activities to ensure operating systems, applications, and security tools remain updated.
• Monitor network traffic and investigate unusual patterns that may indicate unauthorised access or data exfiltration.
• Assist in developing security awareness materials and educating employees about phishing, social engineering, and cyber hygiene.
• Support business continuity, disaster recovery, and cybersecurity incident preparedness activities.
• Contribute to security policy development, risk management initiatives, and continuous improvement of security operations.
• Ensure security activities align with applicable data protection regulations and recognised cybersecurity frameworks.

Requirements & Tech Stack

• Knowledge of cybersecurity fundamentals, security operations, and information security principles.
• Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic Security.
• Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network segmentation.
• Familiarity with security tools such as Wireshark, Nmap, Nessus, Qualys, or OpenVAS.
• Understanding of endpoint security and EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
• Knowledge of operating systems, including Windows, Linux, and their security configurations.
• Familiarity with vulnerability assessment, patch management, and security remediation processes.
• Understanding of authentication, authorization, encryption, hashing, digital certificates, and access control mechanisms.
• Familiarity with scripting languages such as Python, PowerShell, or Bash for security automation.
• Knowledge of common attack techniques, including phishing, malware, brute-force attacks, privilege escalation, and lateral movement.
• Understanding of the MITRE ATT&CK framework and common cybersecurity threat models.
• Familiarity with cloud security services across AWS, Microsoft Azure, or Google Cloud Platform.
• Understanding of identity and access management (IAM), multi-factor authentication, and privileged access management.
• Familiarity with web application security concepts and the OWASP Top 10.
• Knowledge of vulnerability management, security hardening, and secure configuration practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Understanding of security logging, event correlation, alert triage, and incident documentation.
• Familiarity with ticketing and workflow management tools such as Jira or ServiceNow.

Qualifications

• Strong knowledge of cybersecurity fundamentals, information security principles, and emerging cyber threats.
• Understanding of network security, endpoint protection, operating system security, and identity and access management.
• Ability to monitor security alerts, investigate suspicious activities, and identify potential security vulnerabilities.
• Familiarity with incident response processes, threat detection, and security event analysis.
• Knowledge of vulnerability assessments, risk analysis, and security management practices.
• Strong analytical, problem-solving, troubleshooting, and critical-thinking skills.
• Attention to detail when analysing security logs, system configurations, alerts, and investigation reports.
• Ability to prepare clear technical documentation, incident reports, and security remediation recommendations.
• Excellent communication and collaboration skills when working with technical teams and business stakeholders.
• Ability to prioritise security incidents, manage multiple responsibilities, and work efficiently under deadlines.
• Understanding of data privacy, confidentiality, compliance, and the secure handling of sensitive information.
• Ability to work independently and collaboratively in remote or distributed team environments.
• A degree in Cybersecurity, Computer Science, Information Technology, Network Security, or a related discipline is preferred.

Preferred Qualifications

• Previous experience in a Security Operations Centre (SOC), security monitoring, or incident response environment.
• Hands-on experience investigating alerts and incidents using SIEM and EDR platforms.
• Familiarity with threat hunting techniques and proactive security monitoring.
• Experience conducting vulnerability assessments using tools such as Nessus, Qualys, or OpenVAS.
• Understanding of penetration testing methodologies and security assessment techniques.
• Familiarity with ethical hacking tools and platforms such as Burp Suite, Metasploit, and Kali Linux.
• Knowledge of web application security, API security, and common application vulnerabilities.
• Experience analysing network traffic, packet captures, and suspicious communications using Wireshark or similar tools.
• Familiarity with malware investigation, phishing analysis, and digital forensics fundamentals.
• Understanding of cloud security monitoring, cloud access controls, and cloud configuration assessments.
• Knowledge of zero-trust security principles, network segmentation, and defence-in-depth strategies.
• Experience with security automation and orchestration tools, including Security Orchestration, Automation and Response (SOAR) platforms.
• Familiarity with scripting and automation using Python, PowerShell, or Bash.
• Understanding of penetration testing reports, vulnerability prioritisation, and remediation tracking.
• Knowledge of governance, risk, and compliance (GRC) processes and security audit requirements.
• Familiarity with ISO 27001, NIST, CIS Controls, PCI DSS, or other relevant security standards.
• Understanding of UK GDPR and the Data Protection Act 2018, where applicable to the role.
• Experience supporting security awareness programmes and phishing simulation exercises.
• Familiarity with threat intelligence platforms, indicators of compromise (IOCs), and threat analysis techniques.
• Understanding of secure software development practices and DevSecOps principles.
• Relevant certifications such as CompTIA Security+, CySA+, Network+, Certified Ethical Hacker (CEH), SSCP, or CISSP are an advantage.
• Practical cybersecurity labs, security research, Capture the Flag (CTF) participation, or a portfolio of security projects are an advantage.