{"id":1138201,"url":"https://alion.io/job/thales-group-threat-hunting-incident-response-intern","title":"Threat Hunting & Incident Response Intern","company":{"id":143,"name":"Thales Group","domain":"thalesgroup.com","url":"https://alion.io/company/thales","size_band":"5000+","is_staffing_agency":false,"is_intermediary":false,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-09-23T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"intern","employment_type":"internship","work_mode":"hybrid","remote_scope":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":95000,"period":"year","method":null,"sample_n":2443},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-23T09:10:21Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-09-23T13:33:54Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Location: Madrid Emilio Vargas, SpainThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.Your opportunity\nTurn your passion for cybersecurity into real-world impact. Join our Threat Hunting and Incident Response team, learn from experienced specialists and help detect, investigate and respond to evolving threats.\nKey responsibilities\nSupport threat hunting and the analysis of security alerts, events and incidents.\nIdentify suspicious behaviour and potential indicators of compromise.\nHelp monitor security platforms and document incidents, reports and procedures.\nContribute to improving detection and response processes while tracking emerging threats.\nRequirements\nCurrently studying or recently graduated in Cybersecurity, Computer Science, Telecommunications, Engineering or a related field.\nBasic knowledge of operating systems, networks and information security.\nAnalytical mindset, curiosity, teamwork and a strong interest in Threat Hunting and Incident Response.\nProfessional working proficiency in English.\nAvailability to work 8 hours per day in Madrid under a hybrid model.\nNice to have\nExposure to SIEM, EDR/XDR, SOC, Threat Hunting or Incident Response.\nKnowledge of Python, PowerShell, MITRE ATT&CK, log analysis, CTFs or cybersecurity labs.\nWhat you can expect from us\nHands-on experience with real cybersecurity projects and investigations.\nMentoring and continuous learning from experienced specialists.\nA collaborative, international and innovation-driven environment.\nReady to start your cybersecurity career?\nApply now and help us stay one step ahead of cyber threats.\nAt Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!","description_format":"text","description_chars":2915,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Incident Response","Electronic Warfare","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-23T09:10:21Z"}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":49,"reasons":["conf:1","win:early","comp:junior,brand"],"computed_at":"2026-09-23T15:03:53Z"},"pay":null,"html_url":"https://alion.io/job/thales-group-threat-hunting-incident-response-intern","json_url":"https://alion.io/job/thales-group-threat-hunting-incident-response-intern.json","meta":{"generated_at":"2026-09-23T15:03:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}