Information Security Intern

Hilltop Holdings is looking for a Cybersecurity Intern! The cybersecurity internship is an opportunity that introduces aspiring cybersecurity professionals to the day-to-day operations of security within the company. Interns are primarily exposed to frontline duties associated with cybersecurity practices and are introduced to the processes of event assessment and escalation (when warranted) to senior members of the cybersecurity team. The intern will learn firsthand how cybersecurity controls are implemented, managed and enhanced across the business.

Working alongside one or more mentors, the intern will perform data collection, ticket processing, analysis and remediation tasks. The Intern also works with cybersecurity team members to understand architectural designs, best practices, and event and incident response (IR) obligations. To be effective, the intern must have a general understanding of cybersecurity principles and concepts, as well as solid practical hands-on experience within the technology space.

• Follow and execute directives issued by cybersecurity management and senior employees.
• Support day-to-day activities performed by the cybersecurity team.
• Learn to manage tools and solutions implemented throughout the organization.
• Work with senior members of the team to learn basic first-line threat assessment and response tasks.
• Execute tasks requested by cybersecurity team members, such as analysis, investigation, reporting and maintenance of general cybersecurity upkeep.
• Assist in supporting SOC, IR and security networking teams.
• Monitor dashboards and event logs with escalation to members of the cybersecurity team.
• Attain proven proficiency with cybersecurity tools and perform front-end troubleshooting and general triage.
• Read daily cybersecurity resources to stay current on security threats and vulnerabilities.
• Perform other duties as assigned.

• Working toward completion of undergraduate degree in information assurance, computer science, engineering or related technical field preferred.
• Fundamental knowledge of cybersecurity principles and best practices.
• General knowledge and hands-on coursework (lab) experience with endpoint, network, vulnerability, forensic and log management tools.
• Basic understanding, knowledge of and hands-on capabilities with operating system configuration (Windows, Unix, Linux) and networking (DNS, DHCP, routing protocols).
• Ability to analyze event and incident logs, and work with SOC and IR teams to assess security events related to malware, vulnerabilities, and exploits.
• History of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
• Solid written and verbal communication skills.
• Capable of working with diverse teams.
• Organized and punctual.
• Confident, but humble and willing to learn and take initiative.
• None expected, but certificates obtained during coursework are a plus.