IT Security Consultant Internship

About the Role:

Join our security operations team and learn the day-to-day work of a SOC on a live environment. A working security engineer will review your work and teach you how we investigate and decide.

What You'll Do:

-

Monitor and triage alerts in our SIEM (Wazuh): separate false positives from real threats and write up what you found. -

Investigate web attacks, scans and brute-force attempts using nginx, authentication and system logs, and enrich IPs, domains and file hashes with threat-intelligence tools. -

Review vulnerability scan results across Linux servers, help prioritise fixes, track patching of newly published critical advisories and verify the fixes. -

Tune detection rules and decoders, test them, and cut down alert noise. -

Support file integrity monitoring, configuration checks against CIS benchmarks, and onboarding of new servers into monitoring. -

Build and maintain security dashboards and weekly reports for the team. -

Write short runbooks and incident write-ups. -

Automate repetitive checks with Python or Bash, and help test AI-assisted alert triage.

Tools and Topics:

Wazuh and OpenSearch dashboards, Linux (Debian/Ubuntu), Docker, cloud security basics (GCP), CI/CD tooling, MITRE ATT&CK, CVE/NVD, web server logs, OWASP Top 10.

Good to Have:

-

Hands-on lab work with Wazuh, Splunk, ELK or QRadar. -

TryHackMe or Hack The Box activity, CTFs or a home lab. -

Basic Python or Bash. -

Entry-level certifications or courses, such as the Google Cybersecurity Certificate, Fortinet NSE 1-2, Cisco's introductory cybersecurity courses or Microsoft SC-900.

What You'll Gain:

-

Hands-on SOC experience on production systems, not a simulation. -

Mentoring from a working security engineer. -

Internship completion certificate. -

Conversion to a full-time role based on your performance.