L1 SOC Security Analyst Intern

About the role

Join the Security Operations Center (SOC) as a Level 1 Security Analyst Intern. You will gain hands‑on experience in security monitoring, incident triage, and automation while supporting the protection of critical energy and environmental data.

Key responsibilities

• Monitor security alerts from SIEM, XDR, SOAR and Threat Intelligence platforms and perform initial triage.
• Escalate complex incidents to Level 2 analysts and assist in investigating suspicious activity using endpoint detection and network security tools (firewalls, SASE, WAF).
• Support security engineers in configuring firewalls, XDR solutions and developing SOAR playbooks to automate response workflows.
• Analyze logs from network devices, servers, cloud environments and endpoints to identify anomalies.
• Assist with basic digital forensics, malware analysis and reverse engineering under senior guidance.
• Enrich investigations with real‑time threat intelligence and contribute to the creation of detection rules and security policies.
• Document incidents and investigation steps in the SOC incident management system.

Required profile

• Enthusiastic about cybersecurity and eager to gain practical experience in a SOC environment.

Required skills

• Security Information and Event Management (SIEM)
• Extended Detection and Response (XDR)
• Security Orchestration, Automation and Response (SOAR)
• Threat Intelligence Platform (TIP)
• Endpoint detection platforms
• Firewalls, Secure Access Service Edge (SASE) and Web Application Firewall (WAF)
• Log analysis
• Digital forensics tools
• Malware analysis and reverse engineering
• Scripting for automation (e.g., Python)
• Detection rule development