Intern - Cyber Security
Posted
Summary
Entry-level cyber security intern in Colombo supporting a security operations team: monitoring SIEM, firewall, IDS/IPS, EDR and email gateway alerts, triaging and escalating incidents, analyzing phishing reports, and preparing incident tickets and daily/weekly reports. Requires a Cyber Security/IT degree path and shift flexibility.
Job Description
- Assist with monitoring security alerts and events from SIEM tools and other monitoring systems under supervision
- Assist with reviewing logs and alerts from firewalls, IDS/IPS, antivirus, EDR, and email gateways, and report suspicious activity to analysts
- Support initial triage of security alerts and escalate potential incidents in line with defined escalation paths
- Assist with analyzing reported phishing emails and suspicious user activity
- Assist with health checks of monitoring tools and report visibility gaps or tool failures
- Support the preparation of incident tickets, investigation notes, and daily and weekly reports
- Stay informed of emerging threats and vulnerabilities, and use threat intelligence under guidance
- Participate in shift handovers, training, and job shadowing, and follow defined SOPs and confidentiality requirements
Person Specification
- Currently pursuing or completed a Bachelor's degree in Cyber Security or a similar IT field
- Basic understanding of security monitoring, networking, and operating system concepts
- Eagerness to learn and develop security operations skills
- Good communication and teamwork skills
- Willingness to work in shifts as required