Cybersecurity Incident Response Intern

Job Description

Cybersecurity Incident Response Intern | Xerox Holdings Corporation

The Tone:
This is an internship at Xerox Holdings Corporation, a company that has been redefining the workplace for over a century. Xerox excels in office and production print technology, having strategically expanded into software and services to support the modern hybrid workplace. This role is crucial for an intern to serve as the first line of defense within the Cybersecurity Team, safeguarding information systems. By monitoring, detecting, and responding to security incidents, this position directly ensures the confidentiality, integrity, and availability of corporate and customer data.

The TL;DR
• Role: Internship
• Team: Xerox Cybersecurity Team (XCS), collaborating with Senior Incident Responders and Cyber Threat Intelligence
• Mission: Proactively monitor, detect, and respond to security events to maintain the security and integrity of global information systems
• Tech Stack: Endpoint security tools, Cloud security tools (AWS, Azure), Email security tools, Web Application Firewalls (WAFs), External attack surface analysis tools, Endpoint Detection & Response (EDR) tools, Security Information and Event Management (SIEM) platforms, Python, PowerShell

What You’ll Actually Do
• Investigate: Monitor and investigate security alerts and events using advanced analysis techniques and cutting-edge security tools.
• Document: Meticulously document findings in an event case management system for tracking and resolution.
• Collaborate: Work closely with Senior Incident Responders and Cyber Threat Intelligence to gain insights and resolve real-world security issues.
• Analyze: Apply analysis techniques to scrutinize security logs and artifacts, accurately determining impact and root cause of security incidents.
• Advise: Engage directly with business stakeholders and end-users to provide expert remediation guidance and enforce robust security policies.

The Must-Haves
• Background: Currently pursuing a degree in Cybersecurity, Computer Science, Information Systems, or Data Science.
• Experience: No specific years of experience are required, but candidates should be eager to gain practical experience in information system security.
• Skills: Basic knowledge of network security tools and firewall analysis; foundational knowledge of endpoint detection & response tools and search queries; foundational knowledge of datacenter environments and cloud infrastructures (e.g., AWS, Azure); exposure to security incident and event management (SIEM) platform capabilities and query formulation; knowledge of scripting languages (e.g., Python, PowerShell).