Internship - SOC Engineering - (SIEM tools)

Are you passionate about cybersecurity and eager to gain hands-on experience in Cegeka’s state-of-the-art Modern Security Operations Center (SOC)? Do you want to dive into the world of SIEM tools like Splunk and Microsoft Sentinel? Are you excited to help build smart detection mechanisms that identify cyber threats? Then this internship is exactly what you're looking for! During this internship, you’ll have the unique opportunity to apply your theoretical knowledge to real systems by converting Splunk use cases into Sentinel use cases and vice versa. This will give you valuable insight into how both SIEM tools operate and help you understand the complexity of logs from various technologies, such as firewall logs, system logs, and authentication logs all essential for maintaining a secure IT environment.

• You’ll analyze existing Splunk use cases and convert them into functional Sentinel use cases, and vice versa. This involves understanding how detections are configured and how specific logs from different technologies are used to identify attacks.
• You’ll dive into various log types firewall, system, and authentication logs and help us define the right detection rules in both SIEM systems. You’ll learn to recognize patterns and proactively search for potential threats.
• You’ll create detailed documentation of the converted use cases and write clear reports on your findings and analyses. This documentation will support future projects and deepen our understanding of both systems.

• Are you studying a Bachelor's in Applied Computer Science or a Master's in Computer Science? Check!
• You have a passion for security.
• People describe you as structured, autonomous, and proactive? Perfect!
• Knowledge of both Splunk and Sentinel is a plus, but not required.
• Cybersecurity is teamwork. That’s why we expect you to communicate regularly with the team and keep us informed about your progress, challenges, and successes.