Department: Information Security / Cybersecurity
Position: Security Operations Centre (SOC) Intern
Employment Type: Internship
Location: Delaware
Duration: 3-6 months (potential of leading towards a permanent job)
1. Role Overview
We are looking for a motivated and enthusiastic SOC Intern to join our Information Security team. This opportunity is intended for Entry Level Candidates or candidates with foundational cybersecurity knowledge and some exposure to security operations through training, coursework, or practical labs.
The successful candidate will work alongside experienced security professionals and gain practical exposure to security monitoring, incident detection, threat analysis, and vulnerability management.
2. Key Responsibilities
- Assist in monitoring security alerts and events using SIEM and other security monitoring tools.
- Support the identification, analysis, and initial triage of potential security incidents.
- Assist in investigating phishing emails, malware alerts, suspicious activities, and unauthorized access attempts.
- Review and analyze basic security logs from endpoints, networks, and applications.
- Support vulnerability management activities, including tracking and documenting identified vulnerabilities.
- Assist in documenting security incidents, investigation findings, and remediation activities.
- Research emerging cybersecurity threats, vulnerabilities, and attack techniques.
- Escalate suspicious activities and potential security incidents to senior SOC analysts.
3. Required Qualifications and Skills
- entry level - a degree in Cybersecurity, Information Technology, Computer Science, or a related field.
- Must have completed at least one relevant cybersecurity training program or certification.
- Basic understanding of cybersecurity fundamentals, common threats, and security principles.
- Familiarity with networking concepts, including TCP/IP, DNS, HTTP/HTTPS, ports, and protocols.
- Basic knowledge of Windows and Linux operating systems.
- Understanding of common cyber threats such as phishing, malware, ransomware, and brute-force attacks.
- Basic awareness of security monitoring, incident response, and threat detection.
- Good analytical, problem-solving, communication, and documentation skills.
- Strong willingness to learn and develop practical cybersecurity skills.
4. Preferred Training and Certifications
Candidates with training or certifications in the following areas will be preferred:
- CompTIA Security+.
- Google Cybersecurity Professional Certificate.
- Microsoft Security Fundamentals (SC-900).
- Cisco Introduction to Cybersecurity.
- TryHackMe or Blue Team Labs Online.
- Splunk Fundamentals or introductory SIEM training.
- Other recognized SOC Analyst, Incident Response, or Blue Team training.
Note: Candidates are not required to hold all the above certifications. Completion of at least one relevant cybersecurity training program is mandatory. CompTIA Security+ or equivalent training will be considered an advantage.
5. Nice-to-Have Skills
- Basic familiarity with SIEM platforms such as Microsoft Sentinel or Splunk.
- Exposure to endpoint security tools such as Microsoft Defender for Endpoint.
- Basic understanding of the MITRE ATT&CK framework.
- Familiarity with vulnerability assessment tools such as Nessus or OpenVAS.
- Basic scripting knowledge in Python or PowerShell.
- Hands-on experience with cybersecurity labs, CTFs, or simulated security investigations.
6. What We Offer
- Practical exposure to real-world SOC operations.
- Hands-on learning with security monitoring and incident response tools.
- Opportunity to work alongside experienced cybersecurity professionals.
- Exposure to security investigations, threat intelligence, and vulnerability management.
- Mentorship and opportunities for professional development in cybersecurity.
7. Ideal Candidate Profile
The ideal candidate is a recent graduate who has demonstrated a genuine interest in cybersecurity beyond academic studies, completed relevant cybersecurity training, and developed a basic understanding of security concepts through coursework or practical labs.
We are looking for someone who is curious, analytical, detail-oriented, and eager to build a career in Security Operations and Cybersecurity.
