Triage Security Analyst – Intern

Arctic Wolf Networks•Eden Prairie, MN

1d•Onsite

About The Position

The Triage Security Analyst Intern (TSA) is a first level Security Operations Center role, supporting our security services globally. The TSA Intern assesses inbound security data and communications, dealing with straightforward tasks and escalating to our Security Engineers as needed. This role also leverages network troubleshooting skills to assist customers in finding resolutions to their technical issues. Our TSA Interns work 20 hours per week in our Eden Prairie office. We are targeting this role to start late January/early February.

Requirements

Security basics with a demonstrated passion for networking and cybersecurity
Customer facing experience in any fashion with strong communication skills and easily interact with a variety of different people and personalities
Attention to process and a willingness to learn
Recently completed, or within a semester of completing, a degree in Computer Science or Cyber Security discipline OR 2 years in the IT industry with cyber interest

Nice To Haves

Malware
Network Routing and Switching
Virtual environment experience with VMware or Hyper-V
Firewalls and IDS/IPS
Linux, Windows, Mac operating systems
Windows and Active Directory
Cloud technologies including AWS, Azure
MCSE or Active Directory MCP certificates
CompTIA Security +, Network +, A+ desirable

Responsibilities

Understand IT infrastructure and networking to be able to identify security incidents with the help and guidance of senior security engineers
Triage customer requests, apply playbook driven solutions, initiate potential incident investigations through assignment to security engineers
Effectively dispatch both security and communication triage events to the correct people in a timely manner
Understand the processes and systems Arctic Wolf uses, this will be critical in helping the team handle customer requests
Identifying new runbooks required to aid in expanding the knowledge of the team
Continuously drive to learn new aspects of the security business
Review customer configurations to ensure that the system is operating effectively. Resolve any issues that you find problematic leveraging documented procedures and playbooks
Troubleshoot and resolve operational health of sensors and scanners in customer environments
Investigate end-point agent installation and operational issues
Resolve cloud sensor configuration and communication issues