Security Operations Center (SOC) Intern

About the role

The Security Analyst Intern supports the Security Operations Center (SOC) in monitoring, analysing and initially investigating security events across the organisation's technology environment. The role gives structured, hands-on exposure to cybersecurity operations under the guidance of experienced security analysts. It sits in a 24x7 SOC and interns may work on rotational day, evening and night shifts, including weekends and public holidays.

Key responsibilities

• Support continuous monitoring of security alerts and events from SIEM and other security platforms
• Perform initial triage and validation of alerts according to defined procedures and playbooks
• Escalate validated or suspicious events to L1/L2 analysts
• Analyse logs from endpoints, network devices and cloud environments
• Help investigate common incidents such as phishing, malware alerts and anomalous access under supervision
• Document alerts, investigations and actions in the incident management/ticketing system
• Follow SOC processes, SOPs and escalation matrices, and support incident response and containment
• Take part in knowledge sharing, training and internal exercises

Required profile

• Currently pursuing or recently completed a degree in Information Technology, Cybersecurity, Computer Science or a related discipline
• Foundational understanding of information security principles and common threat vectors
• Strong analytical thinking, attention to detail and effective written and verbal communication
• Willingness to learn and adapt in a structured operational environment

Required skills

• Basic knowledge of networking concepts (TCP/IP, DNS, HTTP/HTTPS)
• Preferred: exposure to SIEM platforms or log analysis, familiarity with Windows and/or Linux, basic cloud awareness (Azure, AWS), awareness of MITRE ATT&CK or NIST, and relevant academic projects, labs or certifications

What we offer

• Structured on-the-job training in a SOC environment
• Exposure to enterprise-grade security tools, processes and incident response practices
• Mentorship and guidance from experienced security professionals