Intern, Enterprise Security - Detection & Response

Opportunity

What you'll do

• Assist with cybersecurity incident investigations and response activities.
• Research emerging cyber threats, threat actors, and threat intelligence sources; support threat hunting and security event analysis.
• Develop and maintain cybersecurity reports, dashboards, and performance metrics.
• Assist with detection engineering, alert tuning, and security automation initiatives.
• Support phishing investigations and cybersecurity awareness activities.
• Create and maintain cybersecurity documentation, procedures, and playbooks.
• Collaborate with internal cybersecurity teams and external security service providers to improve detection and response capabilities.

Minimum qualifications

• Currently enrolled in an accredited cybersecurity, computer science, information technology, engineering, or related degree program.
• Complete at least one academic term before the work term begins in May 2027.
• Return to full-time studies immediately after the work term.
• Available to work full-time, 40 hours per week, for the duration of the work term.

Preferred qualifications

• Knowledge of cybersecurity concepts, including incident response, threat detection, and networking.
• Familiarity with Microsoft Defender, SIEM platforms, endpoint security solutions, or cloud security technologies.
• Experience with data analysis, reporting, dashboard creation, Excel, or Power BI; understanding of scripting or automation using PowerShell, Python, or similar technologies.
• Interest or experience in cyber threat intelligence, threat hunting, security operations, or researching threats and threat actors.
• Safety mindset, strong communication and interpersonal skills, collaboration, stakeholder relationship-building, analytical ability, adaptability, organization, and time management.

Work arrangement

• Hybrid work model is offered for eligible office-based employees.

Additional information