Threat Detection Co‑op (Cybersecurity)

About the role

As a Threat Detection Co‑op you will design detection rules, build automation, and support SOC operations while working with threat intel, incident response and platform engineering teams.

Key responsibilities

• Develop high‑fidelity correlation rules and behavioral detections on COGNNA security platforms.
• Translate MITRE ATT&CK tactics, threat intel and vulnerability data into actionable detection logic.
• Identify detection gaps, add new data sources and automate testing to maintain detection quality.
• Lead architecture and optimisation of XDR, SIEM and SOC tech stacks, including log ingestion pipelines.
• Write scripts and automations in Python or PowerShell to improve SOC efficiency.
• Collaborate with intel and incident response teams on threat‑hunting use cases and provide Tier‑3+ investigation support.
• Contribute to SOC playbooks, SOPs and detection engineering workflows.

Required profile

• Enrolled in the final year of a Bachelor’s degree in Computer Science, Cybersecurity, IT or a related field, graduating within the 6‑month co‑op period.
• Basic understanding of cybersecurity concepts, Windows/Linux internals and network protocols.
• Familiarity with writing simple scripts in Python or PowerShell.
• Basic knowledge of log types such as Windows Event Logs and Syslog.
• Availability for a full‑time, 6‑month continuous co‑op assignment.

Required skills

• Python
• PowerShell
• MITRE ATT&CK framework
• SIEM / XDR platforms (e.g., Splunk, Elastic, Wireshark)
• Windows and Linux operating system fundamentals
• Network protocol basics

What we offer

• Hands‑on experience with advanced threat detection engineering and SOC operations.
• Mentorship from senior security engineers.
• Opportunity to influence detection strategies in a fast‑growing security company.