CyberSecurity SOC Intern

Oceaneering•Houston, TX

4d•Hybrid

About The Position

This is a paid Summer Internship Program (late May to early August). As an intern with our CyberSecurity SOC Engineering group, you’ll observe day-to-day SOC operations, learn the processes, assess the operations and identify opportunities for improvement. Your job responsibilities and projects will be based upon your experience and educational background to provide real-life application of your classroom knowledge. You’ll work closely with a mentor to ensure your developmental goals are met and that you meet your performance expectations.

Requirements

Currently pursuing a bachelor’s or master’s degree in: Cybersecurity, Information Security, Computer Science, Information Technology, Information Systems, Computer Engineering, Network Engineering, or a closely related technical discipline
Proficiency in 1 or more operating systems.
Minimum 3.0 GPA
Experience with Microsoft Office, Windows
Must be legally authorized to work in the United States without company sponsorship now and in the future

Nice To Haves

Strong interest in cybersecurity operations and incident detection/response.
Strong analytical and problem-solving skills.
Ability to research unfamiliar technical concepts and communicate findings clearly.
Effective written and verbal communication skills.
Ability to work collaboratively with technical professionals.
Familiarity with cybersecurity concepts and best practices.
Exposure to security or compliance frameworks such as NIST, ISO 27001, or SOC 2.
Understanding of cloud technologies and SaaS applications.
Experience with data analysis or reporting tools.
Relevant coursework or certifications in cybersecurity or information security.
Professionalism when working with confidential or sensitive cybersecurity information.

Responsibilities

Learn the purpose, responsibilities, and operating model of an enterprise SOC and MDR service.
Understand the roles of internal cybersecurity teams and managed security service providers.
Study the lifecycle of security events, alerts, incidents, investigations, and escalations.
Learn how security telemetry from endpoints, identity systems, email, firewalls, cloud platforms, servers, and applications supports threat detection.
Review how SOC analysts investigate alerts and differentiate potentially malicious activity from false positives and expected behavior.
Learn how detection rules, correlation logic, threat intelligence, automation, and analyst judgment contribute to security monitoring.
Observe appropriate SOC investigation and triage processes.
Examine how incidents are escalated and how additional cybersecurity teams or business stakeholders become involved.
Learn the role of automation, orchestration, AI, and MDR technologies within modern security operations.
Examine SOC processes and workflows to identify opportunities for increased efficiency, improved detection, better escalation, or reduced operational friction.
Compare classroom cybersecurity concepts and frameworks against real-world SOC operations.
Discuss observations and recommendations with cybersecurity engineers, analysts, and leadership.
Document findings through diagrams, workflows, summaries, and presentations.
Develop and deliver a final presentation summarizing the internship experience, observations, and recommended opportunities for improving SOC operations.