INTERNSHIP - Threat Hunter - REMOTE

Overview

The Threat Hunting Intern assists cybersecurity teams in actively and proactively searching for hidden threats or attacker footprints that bypass automated security controls. It is a hands-on learning role designed to build technical skills in digital forensics, network defense, and incident response.

• Proactive Hunting:
  Assist senior hunters in running searches across endpoints (computers and devices) and networks to uncover hidden threats, unusual behavior, and stealthy malware.
• Data & Log Analysis:
  Review and analyze security logs and telemetry to identify anomalies or potential indicators of compromise (IOCs).
• Hunt Logic & Rules:
  Help create, test, and write new threat detection rules (such as YARA or SQL-based logic) to improve the company s security visibility.
• Emerging Threat Research:
  Keep up to date on major global cyber threats. Assist in mapping attacker Tactics, Techniques, and Procedures (TTPs).
• Triage & Reporting:
  Help review search findings, separate benign events from actual threats, and draft technical reports for senior analysts.

• Education: Currently pursuing a bachelor’s degree or master’s degree in Cybersecurity, Computer Science, or Information Technology.
• Core Knowledge: Basic understanding of networking principles, operating systems (Windows, Linux, or macOS), and common cyber-attack methods.
• Technical Skills: Familiarity with scripting languages (like Python) and basic query languages.
• Soft Skills: Strong analytical thinking, curiosity, a drive to learn, and the ability to explain technical findings.
• Frameworks: Familiarity with cybersecurity frameworks like MITRE ATT&CK is highly preferred.

• SIEM/Data Platforms:
  Tools used to collect and analyze security data, such as Splunk or Elastic.
• EDR (Endpoint Detection and Response):
  Tools used to monitor computers and servers, such as Crowd Strike, Sentinel One, or Microsoft Defender.
• Threat Intelligence Platforms (TIP):
  Services that provide data on known cyber threats.