Security Operations Intern — SOC & Threat Analysis

Filevine; Salt Lake City (UT); Hybrid; USD 25,000 - 39,000; Full time

Benefits offered by this job

Paid internship

Mentor & learning plan

Capstone project

Pathway to full-time

Open office

Laptop provided

Job summary

Filevine is seeking a Security Specialist – Intern to join our Information Security team. This paid internship provides mentored, hands‑on experience defending a cloud‑based legal platform while you learn from seasoned professionals.

You will monitor alerts, triage events, investigate phishing, assist with vulnerability management, and help document playbooks. A capstone project will showcase your results to the team at internship end.

Qualifications

• Pursuing a career in cybersecurity or a related technical field through a degree program, certification track, bootcamp, or self‑study. Formal enrollment is not required; demonstrable experience (a documented home lab, CTF results, open‑source contributions, or prior IT, help desk, compliance or system administration work) is equally welcome.
• Working knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, common ports and protocols), operating systems, and introductory security concepts, gained through coursework, certifications, or hands‑on experience.
• Foundational understanding of common attack techniques (phishing, malware, credential abuse, privilege escalation, lateral movement) and the defensive controls that counter them.
• Hands‑on exposure to security tools through coursework, labs, competitions, a home lab, or prior work, such as Wireshark, Nmap, a SIEM (Splunk, Elastic, Microsoft Sentinel, or similar), or Security Onion.
• Strong written and verbal communication skills, including the ability to document technical findings clearly and concisely for both technical and non‑technical readers.
• Curiosity, attention to detail, sound judgment, and a willingness to ask questions and learn from feedback.
• Demonstrated integrity and the ability to handle confidential information with discretion.
• Able to commit to the stated weekly schedule for the duration of the internship.

Responsibilities

• Monitor security alerts and events in the SIEM, endpoint detection and response (EDR), email security, and cloud security tools under the guidance of Security Specialists.
• Perform initial (Tier 1) triage of alerts: gather context, determine whether an alert is a true positive, false positive, or benign, document findings, and escalation per SOC runbooks.
• Work the SOC ticket queue: keep tickets accurate and up to date, track investigations to closure, and communicate status clearly to the team.
• Investigate employee‑reported phishing emails: analyze headers, links, and attachments in a sandbox, help block malicious indicators, and assist with user notifications.
• Assist with vulnerability management by reviewing scan results, helping validate findings, and tracking remediation with system owners.
• Help tune detections and reduce alert noise by identifying recurring false‑positive patterns and proposing rule adjustments.
• Review threat intelligence and vendor advisories, summarize what is relevant to Filevine, and help map observed activity to the MITRE ATT&CK framework.
• Support incident response activities as directed, including evidence collection, timeline building, and note‑taking during active incidents.
• Create and improve SOC documentation: runbooks, playbooks, knowledge base articles, and onboarding guides.
• Complete a capstone project (for example, building a new detection, automating a triage step with a script, or improving a playbook) and present the results to the Security team at the end of the internship.

Job description

Filevine is seeking a Security Specialist – Intern to join our Information Security team. This paid internship provides mentored, hands‑on experience defending a cloud‑based legal platform while you learn from seasoned professionals.

You will monitor alerts, triage events, investigate phishing, assist with vulnerability management, and help document playbooks. A capstone project will showcase your results to the team at internship end.