Security Specialist, Intern

The role

You will help the Security team watch alerts, triage them at Tier 1, and work the SOC ticket queue. You will also investigate phishing reports and help with documentation and a capstone project.

What you will do

• Monitor security alerts and events in the SIEM, EDR, email security, and cloud security tools under the guidance of Security Specialists.
• Perform initial (Tier 1) triage of alerts and decide whether each is a true positive, false positive, or benign.
• Work the SOC ticket queue, keep tickets up to date, and track investigations to closure.
• Investigate employee-reported phishing emails by analyzing headers, links, and attachments in a sandbox.
• Assist with vulnerability management by reviewing scan results and tracking remediation with system owners.
• Help tune detections and reduce alert noise by proposing rule adjustments.
• Review threat intelligence and vendor advisories and help map activity to the MITRE ATT&CK framework.
• Support incident response as directed, including evidence collection, timeline building, and note-taking.
• Create and improve SOC runbooks, playbooks, knowledge base articles, and onboarding guides.
• Complete a capstone project and present the results to the Security team at the end of the internship.

Required qualifications

• Pursuing a career in cybersecurity or a related technical field through a degree, certification track, bootcamp, or self-study. Formal enrollment is not required; demonstrable experience is equally we
• Working knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, common ports and protocols), operating systems, and introductory security concepts.
• Foundational understanding of common attack techniques (phishing, malware, credential abuse, privilege escalation, lateral movement) and the controls that counter them.
• Hands-on exposure to security tools through coursework, labs, competitions, a home lab, or prior work, such as Wireshark, Nmap, a SIEM, or Security Onion.
• Strong written and verbal communication skills for both technical and non-technical readers.
• Curiosity, attention to detail, sound judgment, and willingness to learn from feedback.
• Demonstrated integrity and the ability to handle confidential information with discretion.
• Able to commit to the stated weekly schedule for the duration of the internship.

Nice to have

• Progress toward a security or IT certification such as CompTIA Security+, Network+, CySA+, or GIAC GFACT / GSEC.
• Self-directed security learning: CTF events, collegiate competitions, a campus security club, a home lab, or online labs such as TryHackMe or Hack The Box.
• Awareness of MITRE ATT&CK, the NIST Cybersecurity Framework, or NIST SP 800-61.
• Exposure to cloud platforms (AWS, Azure, or GCP) or identity providers (Okta, Microsoft Entra ID, or similar).
• Comfort with ticketing or documentation tools such as Jira, Confluence, ServiceNow, or a GRC/audit platform.
• Background in compliance, audit, risk, privacy, or a similar control-oriented role, including SOC 2, ISO 27001, or HIPAA work.
• Genuine enthusiasm for the field, such as following security news or write-ups.

Benefits

• Paid internship with competitive hourly compensation
• Dedicated mentor and structured learning plan
• Real production experience and a capstone project to showcase in future interviews
• Potential pathway to a full-time Jr. Security Specialist – Tier 1 role for high performers
• Open office working atmosphere
• Laptop provided for the duration of the internship
• Medical, dental, and vision insurance (for full-time employees)
• Maternity and paternity leave (for full-time employees)
• Short and long-term disability
• Competitive and fair pay
• Opportunity to learn from a dedicated leadership team
• Company swag

Before you apply

• Communication about this opportunity will only come from email addresses using "filevine.com". Other addresses are not affiliated with Filevine.

About the company

Filevine is a Legal AI company that delivers Legal Operating Intelligence through one unified platform for legal work. Its LOIS system connects context across matters to automate complexity and surface insight.