Engineering Internship
As a Cyber Security Engineer, you are responsible for deploying, maintaining, and continuously improving shared and client-specific security platforms including SIEM, SOAR, EDR, log pipelines, and automation frameworks across multi-tenant environments. You independently implement and tune detection logic, integrate diverse telemetry sources, and resolve platform issues that impact detection fidelity, reliability, and performance. Operating across varied client technologies, you apply structured troubleshooting to address ingestion failures, false positives, and alert quality gaps while maintaining SLA-aligned service delivery. The role includes contributing to platform development initiatives and building analyst-facing automations that streamline investigations, enrichment, and response workflows. You maintain ownership of platform health, accuracy, and change management, ensuring all configurations and enhancements are tested, documented, and compliant with MSSP standards. Working closely with SOC analysts, incident responders, and architects, you translate operational feedback into scalable engineering improvements. This position combines deep technical accountability with a service-oriented mindset to improve SOC efficiency, detection coverage, and overall client outcomes.
CyberSecurity EngineerJob Description:Primarily operates and participates at the Tier 1 engineering level in a learning and support capacity at the onset. Security Engineers at this level are responsible for supporting, maintaining, and improving the technical tools that enable effective CFC operations (such as SIEMs, EDRs, SOARs, log aggregators, and ticketing systems). They assist with platform configuration, rule tuning, and integration tasks, ensuring proper ingestion, parsing, and alert generation capabilities across supported environments.Responsibility:• Engineers will also participate in operational troubleshooting, help implement detection logic or automation under supervision, and learn to translate analyst feedback into engineering tasks.• This position emphasizes learning through mentorship, hands-on tool management, and an approved engineering training plan.Accountability:• Accept full responsibility for platform reliability, configuration accuracy, and engineering contributions that support CFC effectiveness.Adaptability & Flexibility:• Comfortable working across various security platforms and tools; able to shift focus from configuration to support to documentation as needed.Analytical Thinking:• Ability to dissect detection logic, understand alert patterns, and interpret system health metrics to support platform tuning and improvements.Attention to Detail:• Maintain configuration fidelity and rule logic integrity; thoroughly validate settings and test integrations.Communication & Influence:• Clearly communicate technical findings and support needs to both analysts and engineering teammates; document changes and procedures effectively.Customer Service Focus:• Provide responsive, high-quality support to CFC analysts and stakeholders by resolving platform issues and improving usability.Decision Making:• Make appropriate decisions regarding technical configurations, escalating risks or anomalies in platform behavior to senior engineers.Initiative:• Take proactive steps to identify potential platform gaps, suggest improvements, and pursue development opportunities in new tools or automation.Knowledge:• Develop familiarity with relevant log formats, data schemas, detection frameworks (e.g., MITRE ATT&CK), and platform-specific rule languages.Organization:• Maintain clean, version-controlled documentation and follow standard change management procedures when modifying platform configurations.Stress Tolerance:• Maintain stable and methodical performance when supporting outages, high-priority platform issues, or last-minute detection tuning requests.Training & Certifications:Required• Microsoft AZ500 and Sentinel 1 SIRENExample additional considerations or equivalents such as (not all inclusive)• A+/Network+, CCT, DFE, CSA, GISF, ECSS
Our headquarters is in Knoxville, Tennessee
No reviews yet. Reviews unlock for candidates 30 days after adding this program to their tracker — integrity over volume.
Interview prep for this program▸
- ▸ "How many of your past SkillBridge interns received full-time offers?" — a serious program knows the number.
- ▸ "Who will my day-to-day mentor be, and what does week one look like?"
- ▸ "The listing says 151 - 180 days — can that flex to my approved window if my command shortens it?"
- ▸ "Is relocation expected for a full-time offer, or can I convert where I am?"
- ✓ Your projected start window and separation date (from your profile)
- ✓ Your command's approval status — even "packet drafted" signals you're serious
- ✓ Your civilian-translated resume bullets (generate them here)
- ✓ A written training-plan ask — you'll need it for your packet anyway