Perform first-level alert triage and response for security monitoring tools (SIEM, EDR, email security, etc.)
Investigate and document security alerts, escalating issues when appropriate
Support the organization’s phishing awareness and response program, including reviewing reported emails and assisting with user education efforts
Assist with general security operations tasks, including log review, ticket management, and tool optimization
Create and update security documentation, playbooks, and standard operating procedures (SOPs)
Participate in light threat hunting activities, analyzing logs and telemetry for suspicious activity
Assist in writing or tuning detection rules under guidance from senior security team members
Contribute to improving operational workflows and automation where possible

Currently pursuing a degree in Cybersecurity, Computer Science, Information Technology, or a related field
Basic understanding of cybersecurity concepts (e.g., phishing, malware, SIEM, endpoint protection)
Familiarity with networking fundamentals and common attack vectors
Strong analytical and problem-solving skills
Excellent written communication skills (documentation quality is important in this role)
Eagerness to learn and take initiative

Security Intern

Key skills