Threat Hunting Intern

Role overview

This internship is focused on cybersecurity threat hunting. The intern will support teams that actively search for hidden malicious activity and attacker traces that may have slipped past automated defenses. It is a practical learning opportunity built around digital forensics, network protection, and incident response skills.

What you'll do

• Support experienced threat hunters in investigating endpoints and network activity to surface suspicious behavior, concealed threats, and stealthy malware.
• Examine security logs and telemetry data to spot unusual patterns and possible indicators of compromise.
• Assist with designing, testing, and documenting detection logic and rules, including YARA-style or SQL-based approaches, to improve visibility into threats.
• Track important global cyber threats and help map attacker tactics, techniques, and procedures.
• Review hunt results, distinguish harmless activity from real risk, and prepare technical findings for senior analysts.

What we're looking for

• Applicants should be currently enrolled in a bachelor’s or master’s program in Cybersecurity, Computer Science, or Information Technology.
• A foundational understanding of networking, operating systems such as Windows, Linux, or macOS, and common attack techniques is required.
• Exposure to scripting, especially Python, and basic query languages will be useful.
• Strong analytical ability, curiosity, a willingness to learn, and the confidence to communicate technical findings clearly are important.
• Familiarity with security frameworks such as MITRE ATT&CK is strongly preferred.

Tools and platforms

The role may involve working with SIEM and data analysis platforms such as Splunk or Elastic, endpoint detection and response tools such as CrowdStrike, SentinelOne, or Microsoft Defender, and threat intelligence platforms used to track known threats.

About the company

The employer is a managed detection and response organization that supports many businesses in strengthening their security posture. Its teams include SOC analysts, threat hunters, detection engineers, and threat researchers who work continuously to identify attacks earlier, respond faster, and improve defenses over time.

Benefits

• Medical, dental, and vision coverage for employees and dependents
• 401(k) matching with vesting every payroll
• Flexible, remote-friendly work setup
• Training opportunities to grow your skills

Additional information

This role is described as an internship, but the employment type provided is part-time and remote. The pay field is not specified. The listing also notes that the company has a website and blog and maintains a presence on professional networking platforms, but no external links are included here.