SOC Intern

About the Role

As a Security Operations Center Intern, you will serve alongside trained cybersecurity professionals as a frontline defender focusing on IT security incident response, threat detection, and comprehensive security investigations. Operating within our IT Operations and Support department, you'll collaborate closely with our IT Security department for escalations and advanced troubleshooting while proactively investigating security alerts from multiple platforms. Using industry recognized tools such as EDR, SIEM, DSPM, and SEG, you’ll analyze threats and implement response measures to protect our organization's digital assets.

Key Responsibilities

• Investigate potentially malicious messages to assess threat level.
• Perform threat remediation and end-user follow-up actions for people and systems impacted by IT Security events.
• Respond to active IT Security alerts with urgency.
• Monitor observability platforms for trends and implement proactive measures.
• Participate in security incident response as a member of the CIRT (Cyber Incident Response Team).
• Complete various project work as assigned.

Requirements & Tech Stack

• Access to a reliable and secure high-speed internet connection (cable or fiber preferred).
• Access to a home router and modem.
• A dedicated home office space that is noise- and distraction-free with a strong wireless or wired Ethernet connection.
• A valid, physical address.
• The desire and ability to work and communicate with other team members via chat, webcam, etc.

Qualifications

Currently pursuing or recently completed a degree in an IT related field or equivalent combination of experience and IT certifications (CompTIA A+, Security+, CySA+).

This role does not require a degree. We value relevant skills and experience and alignment with our core values above all else.

Desired Traits & Skills

Soft Skills

• Strong verbal and written communication skills.
• Strong problem-solving skills.
• Drive and initiative, the desire to constantly improve skillset and knowledge base.
• Ability to work well in a collaborative team environment.
• Ability to multi-task and address tasks and issues in order of priority.
• Ability to self-manage and self-motivate.

Technical Skills (Required)

• Experience with Microsoft Office suite of software.
• Understanding Windows OS and Linux OS system processes, services, and file systems.
• Strong knowledge of network infrastructure and how different network components function.
• Basic understanding of security frameworks (NIST, MITRE ATT&CK, etc).

Technical Skills (Preferred)

• Experience with ticketing systems.
• Experience with IT Security tools such as SIEM, DSPM, PAM, EDR, etc.
• Experience with security orchestration and automated response (SOAR) tools.
• Experience with email gateway administration.
• Experience investigating potentially malicious emails, links, attachments etc.
• Experience with data observability platforms and trend monitoring.
• Experience with email gateway investigation and research.
• Experience with scripting languages (Python, PowerShell etc.).
• Experience with network security products such as Cloudflare, CheckPoint Firewalls, Wireless Access Portals, etc.