Intern

St. Luke's Health System•Boise, ID

About The Position

The Cybersecurity Threat Operations Intern supports the Threat Operations team with day-to-day security operations related to threat detection, monitoring, analysis, and incident response. The internship provides hands-on exposure to security tools, healthcare risk considerations, and cross-functional security workflows while helping the intern develop foundational technical and professional skills. Each intern owns a project throughout their time with the team. The project involves designing, building, documenting, and implementing a cybersecurity solution that improves St. Luke's Health System's detection, response, monitoring, or preventative security capabilities. Interns work through the project lifecycle with guidance and mentorship from team members. As time allows, interns may also participate in operational activities, including alert triage and investigation, threat hunting, detection engineering, alert tuning, documentation, and other security projects. Exposure to multiple cybersecurity domains may depend on organizational needs and the intern's strengths and interests. The internship emphasizes curiosity, ethical conduct, communication, receptiveness to feedback, and the ability to follow established processes while learning and adapting in a healthcare-focused security environment. Interns are expected to make consistent progress, engage with mentors, deliver project milestones, produce clear and actionable documentation, contribute to operational effectiveness, and demonstrate increasing independence and sound judgment appropriate to their experience. Deep cybersecurity expertise, healthcare security experience, and independent incident ownership are not expected at the outset; interns should recognize uncertainty and seek guidance.

Requirements

High school diploma or equivalent.
Currently enrolled in, or graduated within the past six months from, an undergraduate or graduate degree program.
Zero years of experience required.
Must be curious, ethical, communicative, receptive to feedback, and willing to learn and adapt.
Able to follow established processes and seek assistance when uncertain.

Responsibilities

Own an assigned cybersecurity project throughout the internship, designing, building, documenting, and implementing a solution that improves detection, response, monitoring, or preventative security capabilities.
Assist with security alert triage and investigation using SIEM and EDR tools.
Participate in threat hunting activities.
Assist with detection engineering initiatives and alert tuning efforts.
Produce clear, accurate, and actionable documentation.
Contribute to operational security projects and activities that improve analyst efficiency, alert fidelity, process maturity, or team effectiveness.
Engage with mentors, incorporate feedback, ask questions, and seek guidance when needed.