Information Security Intern null

Your role

As an Intern in the Security Operations Center, you will help the firm manage cybersecurity risks at every stage of preparedness by identifying vulnerabilities and readiness through a comprehensive gap analysis and risk assessment, implementing best practices to avoid compromise, and recovering from cybersecurity attacks.

Navigating Responsibilities

• Security Events Monitoring: Use SIEM technologies and other native tools to perform the monitoring of security events on a 24x7 basis and perform analysis, while integrating the results and information needed to proactively protect the enterprise.
• Inbound Requests Management: Manage inbound requests via the ticketing system, as well as via telephone calls, and provide security notifications via three methods: logging incident tickets, sending emails, and placing telephone calls.
• Log Analysis: Assist in performing analysis on logs produced by network devices utilized within the infrastructure such as firewalls, content filtering, syslog from various sources/devices, assorted Intrusion Detection capabilities, substantiating vulnerability scanner results, directory services, DHCP logs, Secure Email Gateway logs, and approved applications.
• Root-cause Analysis: Assist in cybersecurity root-cause analysis in support of any tickets for which it fails to meet Acceptable Quality Levels. This root-cause analysis will include documenting recommendations for corrective action.
• Defect/Threat Identification: Assist in security events analysis and support to include identifying potential threats, anomalies, and infections, documenting findings, providing recommendations within the incident management system, performing triage of incoming security events, performing preliminary and secondary analysis of those events, and validating the events.

About you

The Ideal Candidate

• Current Degree Pursuit: Pursuing a bachelor’s degree or above in Computer Science, Systems Engineering, Cybersecurity, Information Technology, or related area.
• Tech-Savvy: Experience/knowledge in using numerous security tools and technologies including some of the following technologies: SIEM, IDS/IPS, Web application firewalls, Antivirus, Proxy and URL filtering, DLP, and Vulnerability scanner. 
• Understanding of basic network services, TCP/IP, IP Routing, attacks, exploits, and vulnerabilities.
• Knowledgeable in troubleshooting Microsoft products and Operating systems (i.e., MAC OS & Linux) would be desirable. Experience with VPN, SSL, and other encryption methodology/technology is a plus.

Benefits

• Flexible Time Off - Tailor your breaks to suit personal needs and preferences.
• Time Allotted for Learning - Dedicated time to invest in self-growth and skill development.
• Work From Home (WFH) Options - Enjoy the flexibility to work comfortably from your house in a hybrid environment.
• Office Perks - shuttle and free meal.
• Continues learning opportunities.

Training & development

Training is the cornerstone of successful privacy and cyber security programs use of technology fixes and credit and identity monitoring certainly play a large role, but programs and policies are only effective when implemented properly by employees. 

Career progression

Kroll believes in nurturing the next generation of leaders and is committed to professional growth. Here are some insights into Kroll’s accomplished professionals:

Source

• ambitionbox.com/benefits/kroll-benefits
• careers.kroll.com/en/job/manila/intern-information-security
• kroll.com/en/insights/publications/cyber/security-equity-with-employee-training
• youtube.com/@krollph