Cyber Security Intern: Threat Hunting & MITRE Runbooks

Welltower Careers; Frisco (TX); On-site; USD 25,000 - 36,000; Part time

Job summary

WELLTOWER is seeking a Cyber Security Intern to join the Security Analytics team in Frisco for a 10-week program at 20-30 hours per week. You’ll triage live alerts, assist with threat hunting, and help surface detection gaps while learning MITRE ATT&CK mappings and incident response practices.

You’ll work directly with IT, MSSP partners, and security leadership on a capstone project, build runbooks, and contribute to improving detection coverage.

Qualifications

• Currently pursuing a Bachelor's or Master's in Cybersecurity, Computer Science, Information Systems, or a related field.
• Working understanding of core security concepts: authentication and access control, the attack lifecycle (MITRE ATT&CK or cyber kill chain).
• Familiarity with Windows and basic networking (TCP/IP, DNS, HTTP).
• Clear written communication and collaborative skills.
• Motivated, proactive and able to work with data owners, vendors, and teams.

Responsibilities

• Assist with triage: handle live alerts from SIEM/EDR/MDR using runbooks and draft verdicts for review.
• Assist with threat hunting: run guided hunts across endpoint, identity, email and cloud telemetry.
• Help surface detection gaps: document coverage gaps and telemetry requirements.
• Apply MITRE ATT&CK: map findings to adversary techniques to guide coverage.
• Build investigation runbooks: outline recognition, data to pull, scoping, and escalation.
• Collaborate across teams: work with IT and service desk to resolve issues.
• Learn MSSP partnership workflows and incident escalation processes.

Skills

Cybersecurity basics

MITRE ATT&CK

Log analysis

Windows OS

Networking

KQL

Python

PowerShell

MITRE ATT&CK mapping

Education

Bachelor's or Master's in Cybersecurity/ CS

Job description

WELLTOWER is seeking a Cyber Security Intern to join the Security Analytics team in Frisco for a 10-week program at 20-30 hours per week. You’ll triage live alerts, assist with threat hunting, and help surface detection gaps while learning MITRE ATT&CK mappings and incident response practices.

You’ll work directly with IT, MSSP partners, and security leadership on a capstone project, build runbooks, and contribute to improving detection coverage.