Cyber Security Intern

About the Role

Hiring: Cyber Security Analyst | Remote – USA

We are hiring a skilled and motivated Cyber Security professional on behalf of one of our clients for a remote opportunity.

Key Responsibilities

• Monitor security alerts, system logs, and network activities to identify suspicious behaviour and potential security incidents.
• Investigate security incidents, determine their root causes, and coordinate appropriate response and remediation activities.
• Perform vulnerability assessments and security scans to identify weaknesses in systems, applications, and network infrastructure.
• Analyse security events using Security Information and Event Management (SIEM) tools.
• Support incident response activities, including threat identification, containment, eradication, and recovery.
• Conduct threat intelligence analysis to understand emerging cyber threats, attack techniques, and vulnerabilities.
• Implement and maintain security controls to protect endpoints, servers, networks, and cloud environments.
• Assess firewall configurations, intrusion detection systems, and intrusion prevention systems to identify potential security gaps.
• Conduct risk assessments and recommend mitigation strategies to reduce organisational cybersecurity risks.
• Monitor endpoint detection and response (EDR) systems to identify and investigate suspicious activities.
• Support identity and access management processes, including access reviews, authentication policies, and privileged access controls.
• Assist in implementing multi-factor authentication (MFA), least-privilege access, and secure authentication mechanisms.
• Review system configurations and security policies to ensure compliance with organisational standards.
• Conduct security assessments of applications, infrastructure, and cloud-based environments.
• Analyse phishing emails, suspicious attachments, and potentially malicious URLs to identify security threats.
• Support malware analysis and investigation of potentially compromised systems.
• Perform security audits and assist in identifying gaps in existing security practices.
• Collaborate with IT, infrastructure, development, and compliance teams to address security vulnerabilities.
• Assist with penetration testing activities and coordinate remediation of identified findings.
• Maintain incident reports, security documentation, investigation records, and vulnerability registers.
• Support patch management activities to ensure operating systems, applications, and security tools remain updated.
• Monitor network traffic and investigate unusual patterns that may indicate unauthorised access or data exfiltration.
• Assist in developing security awareness materials and educating employees about phishing, social engineering, and cyber hygiene.
• Support business continuity, disaster recovery, and cybersecurity incident preparedness activities.
• Contribute to security policy development, risk management initiatives, and continuous improvement of security operations.
• Ensure security activities align with applicable data protection regulations and recognised cybersecurity frameworks.

Requirements & Tech Stack

Technical Skills

• Knowledge of cybersecurity fundamentals, security operations, and information security principles.
• Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic Security.
• Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network segmentation.
• Familiarity with security tools such as Wireshark, Nmap, Nessus, Qualys, or OpenVAS.
• Understanding of endpoint security and EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
• Knowledge of operating systems, including Windows, Linux, and their security configurations.
• Familiarity with vulnerability assessment, patch management, and security remediation processes.
• Understanding of authentication, authorisation, encryption, hashing, digital certificates, and access control mechanisms.
• Familiarity with scripting languages such as Python, PowerShell, or Bash for security automation.
• Knowledge of common attack techniques, including phishing, malware, brute-force attacks, privilege escalation, and lateral movement.
• Understanding of the MITRE ATT&CK framework and common cybersecurity threat models.
• Familiarity with cloud security services across AWS, Microsoft Azure, or Google Cloud Platform.
• Understanding of identity and access management (IAM), multi-factor authentication, and privileged access management.
• Familiarity with web application security concepts and the OWASP Top 10.
• Knowledge of vulnerability management, security hardening, and secure configuration practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Understanding of security logging, event correlation, alert triage, and incident documentation.
• Familiarity with ticketing and workflow management tools such as Jira or ServiceNow.

Required Skills & Qualifications

• Strong understanding of cybersecurity concepts, information security principles, and common cyber threats.
• Knowledge of network security, endpoint protection, operating system security, and access management.
• Ability to analyse security alerts, investigate suspicious activities, and identify potential vulnerabilities.
• Understanding of incident response procedures and security event investigation.
• Familiarity with vulnerability assessment and risk management methodologies.
• Strong analytical thinking, problem-solving, and troubleshooting abilities.
• Attention to detail when reviewing security logs, alerts, configurations, and investigation evidence.
• Ability to document security incidents, technical findings, and remediation recommendations clearly.
• Strong communication skills and the ability to collaborate with technical and non-technical stakeholders.
• Ability to prioritise security incidents and manage multiple tasks effectively.
• Understanding of confidentiality, data protection, and responsible handling of sensitive information.
• Ability to work independently and collaborate with distributed teams in a remote environment.
• A degree in Cybersecurity, Computer Science, Information Technology, Network Security, or a related field is preferred.