Role Description

As a member of the Information Security team, the Cybersecurity Analyst intern is responsible for supporting SecOps efforts to protect the company from intrusions, malware, threat actors, and other forms of cyber attacks. The cybersecurity analyst intern will also be involved in supporting efforts to automate, integrate, and aggregate the data and systems needed to optimize and accelerate analysis.

• Researches emerging threats and vulnerabilities to aid in the identification of network incidents, and supports the creation of new architecture, policies, standards, and guidance to address them.
• Provides incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Supports the creation of business continuity/disaster recovery plans, to include conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies.
• Conducts network monitoring and intrusion detection analysis using various computer network defense (CND) tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, host-based security system (HBSS), etc.
• Reviews alerts and data from sensors and documents formal, technical incident reports.
• Tests new computers, software, switch hardware and routers before implementation to ensure security.
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
• Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization.
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity.
• Works with threat intelligence and/or threat-hunting teams.

Qualifications

• Current enrollment in a Bachelor's degree program in computer science, engineering, information systems or another related discipline strongly preferred.
• Knowledge of analyzing threat event data, evaluating malicious activity, documenting unusual files and data, and identifying tactics, techniques and procedures used by attackers.
• Strong problem-solving and trouble-shooting skills.
• Self-motivated and possessing a high sense of urgency and personal integrity.