Note: The job is a remote job and is open to candidates in USA. Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. This internship will provide you with a thorough understanding of security automation development, API integration, and cross-functional collaboration within a SOC environment.
Responsibilities
- Design, develop, and maintain security automation tools and scripts to enhance the SOC's operational efficiency and response capabilities
- Utilize Python and other scripting languages to create custom solutions for integrating and automating security processes
- Leverage various APIs to automate data retrieval and report generation, enhancing the SOC's analytical and reporting capabilities
- Work with internal and external data sources to streamline data aggregation and analysis
- Regularly investigate attacks and collaborate with Security Operations to understand the threat landscape across the customer base to identify opportunities for improving detection logic and automation
- Stay updated with the latest cybersecurity trends and technologies to continually innovate and improve SOC processes
- Collaborate with SOC analysts to understand their needs and develop automation solutions that support their workflows
- Work closely with other technical teams to integrate security automation tools with existing systems and platforms
Skills
- 2+ years of experience in coding, development, or scripting, with a specific focus on cybersecurity applications, Python Strongly Preferred
- Proven experience in security automation and tool management within a SOC environment
- 1+ years of experience in an information security role, with a preference for experience in SOC, Threat Hunting, or DFIR
- Knowledge of data structures, algorithms, and data analysis techniques
- Proficiency in leveraging APIs for data retrieval and automation
- Familiarity with Elasticsearch, OCSF, Kibana query languages, or similar queries
- Excellent communication skills for effectively summarizing and presenting findings and trends
- General understanding of solutions such as superblocks, n8n, tines, utilizing webhooks, and configuring tools like Hive or SOAR platforms
- Experience in network/system administration, preferably in a cybersecurity context
- Scripting experience with PowerShell is a plus
- Familiarity with Power BI, Excel, or similar tools for data analysis and visualization
- Bachelor's Degree in Computer Science, Engineering, or related technical discipline
- Advanced skills in Kibana, including dashboard creation and data visualization
- Background in network/system administration
- Proficiency in Python Scripting
Benefits
- For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans
- A robust 401k plan
- Discretionary Time Off
- Other minor perks
Company Overview
Blackpoint Cyber is a provider of cybersecurity threat hunting, detection, and response technology. It was founded in 2014, and is headquartered in Denver, Colorado, USA, with a workforce of 51-200 employees. Its website is https://www.blackpointcyber.com.