About the role:
The Detection Engineering team is at the forefront of securing our organization's infrastructure by developing, implementing, and fine-tuning detection mechanisms to identify threats in real-time.
As a Detection Engineering intern, you will contribute to the development of new detection use cases to identify suspicious activity, as well as build automations that enhance and support our Security Operations and the broader team within our Defense Fusion Center.
You'll collaborate with security professionals to understand adversarial tactics and contribute to building stronger defenses for our security operations.
Responsibilities: Assisting in the creation and tuning of detection use cases to identify potential security threats.Analyzing security logs and data to identify anomalies or potential indicators of compromise.Supporting the team in automating detection workflows and playbooks for threat investigation and response.Collaborating with other security teams (SOC, Incident Response, Threat Intelligence) to ensure detection rules are actionable and relevant.Assisting with the development of dashboards and reports that provide visibility into security events and metrics.Conducting Attack Simulations to validate use case detection logic.Documenting detection processes and ensuring alignment with security policies and procedures. Basic Qualifications: Currently pursuing a Bachelor's degree in Information Technology, Systems, MIS, Engineering, Computer Science, Cyber Security, or another related field.Familiarity with scripting languages (e.g., Python, Bash) and basic automation principles.Basic understanding of network and endpoint security concepts. Preferred Qualifications: Interests in IT, infrastructure, engineering, and modern end user technologies.Microsoft suite proficiency.Quick learner with new software or computer applications.Strong analytical, business process analysis, and problem-solving capabilities.Strong interpersonal skills and ability to engage and connect with internal and external partners.Knowledge of operating systems.Basic understanding of detection engineering concepts such as threat modeling and adversary tactics.Knowledge of OSI model and underlying network protocols (e.g., TCP/IP).Knowledge of the common networking and routing protocols.
#J-18808-Ljbffr