{"id":3845205,"url":"https://alion.io/job/welltower-summer-27-intern-cyber-security","title":"Summer '27 Intern - Cyber Security","company":{"id":1915088,"name":"Welltower","domain":"welltower.com","url":"https://alion.io/company/welltower-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"intern","employment_type":"internship","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Frisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"DNS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Microsoft Office","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-11-05T21:52:39Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-09T01:09:59Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"WELLTOWER - REIMAGINE REAL ESTATE WITH US\nWelltower, now the world’s largest real estate company by market capitalization, is growing at an exciting pace! We’re transforming how the world thinks about senior living and wellness-focused real estate by making data-driven decisions-creating vibrant, purpose-driven communities where housing, healthcare, and hospitality converge. Our culture is fast-paced, collaborative, and endlessly ambitious-guided by our mantra: The only easy day was yesterday.\nMeaningful Work Alongside Meaningful Relationships\nOur interns don’t get side projects-they’re immersed in high-priority work from day one. You’ll collaborate directly with our teams to evaluate opportunities, design innovative solutions, and help deliver long-term value. With direct access to senior leadership, hands-on experience across our platform, and a culture that prizes ambition and curiosity, you’ll develop extraordinary skills in just ten weeks.\nIf you’re a bold, independent thinker who thrives on challenge, embraces complexity, and is excited by the opportunity to disrupt an industry through creativity, capital allocation, and compounding growth, Welltower is the place to launch your career.\nSummary\nThe Cyber Security Intern joins Welltower's Security Analytics team, reporting to the Senior Manager, Security Analytics. This is a hands-on analyst role: you will help triage real alerts, assist with threat hunting and help surface detection gaps, and build the investigation runbooks and documentation that strengthen our incident response.\nOver 10 weeks at 20-30 hours per week, you'll work alongside the Security Analytics team on live alerts and investigations, learning how a security team turns raw telemetry into decisions. You'll leave with real reps in the tools and workflows a working analyst uses every day, and with hands-on practice applying the MITRE ATT&CK framework to map real alerts and investigations to adversary techniques.\nWhat You'll do\nCapstone project: Work with the security team to identify a gap in our detection coverage and map it to the relevant MITRE ATT&CK tactic and technique. Work with the data owners and our MSSP to get the right telemetry, then build and test the detection and write the runbook to respond to it. You’ll present the result to security leadership and relevant vendors.\nAssist with triage: help work live alerts from our SIEM, EDR, and MDR partner in our ticketing system using established runbooks; gather the evidence and draft the verdict and reasoning for analyst review.\nAssist with threat hunting: help run guided hunts across endpoint, identity, email, and cloud telemetry, and document what you find.\nHelp surface detection gaps: identify where coverage is missing, document the gap and the expected telemetry.\nApply MITRE ATT&CK: map detection gaps and findings to adversary techniques to guide what coverage gets built.\nBuild investigation runbooks: draft runbooks covering how to recognize an activity, what to pull, how to scope it, and when to escalate.\nContribute to control improvements: based on what you see in investigations, document findings and observations that help the team strengthen security controls.\nCollaborate across teams: work with IT, service desk, and other departments to investigate and resolve security issues.\nLearn the MSSP partnership: work alongside our managed security partner to understand how escalations and alerts flow between their team and ours.\nOther duties as assigned.\nMinimum Requirements\nEducation: Currently pursuing a Bachelor's or Master's in Cybersecurity, Computer Science, Information Systems, or a related field.\nExperience: No experience required. Show us how you've gotten hands-on with security.\nRequired\nCurrently pursuing a Bachelor's or Master's in Cybersecurity, Computer Science, Information Systems, or a related field.\nWorking understanding of core security concepts: authentication and access control, the attack lifecycle (MITRE ATT&CK or cyber kill chain), common malware and phishing techniques, basic log analysis (can read a log and explain what happened).\nFamiliarity with Windows and basic networking (TCP/IP, DNS, HTTP, common ports).\nClear written communication - much of the role is turning evidence into a concise, accurate write-up.\nComfortable asking questions and working with people outside the team (data owners, vendors).\nMotivated and proactive - brings initiative and would rather dig into a problem than wait to be told what to do.\nCoachable and self-directed - takes feedback well and runs with it.\nTakes pride in doing good work - follows through, owns the outcome, and flags questions or mistakes early.\nCurious and persistent, with sound judgment around sensitive data.\nNice to have\nAny query language (KQL, SQL, SPL, or similar).\nPython, PowerShell, or other scripting language.\nExperience mapping findings or coverage gaps to MITRE ATT&CK techniques.\nFamiliarity with identity and email security concepts (MFA, OAuth/token abuse, phishing analysis, email headers).\nHands-on exposure to any SIEM, EDR, cloud security tooling, or detection engineering - classroom, home lab, or CTF.\nBasic cloud platform familiarity (Microsoft Office 365, AWS, or Azure/Entra concepts).\nExperience writing technical documentation or procedures (runbooks, lab write-ups, class reports).\nEmployment is contingent upon the successful completion of a background check, drug screening, and verification of employment, education, and other credentials relevant to the position.\nABOUT WELLTOWER\nWelltower® Inc. (NYSE: WELL) an S&P 500 company, is the world's preeminent residential wellness and healthcare infrastructure company. Our portfolio of ,2500+ Seniors and Wellness Housing communities is positioned at the intersection of housing, healthcare, and hospitality, creating vibrant communities for mature renters and older adults in the United States, United Kingdom, and Canada.\nOur real estate portfolio is unmatched, located in highly attractive micro-markets with stunning built environments. Yet, we are an unusual real estate organization as we view ourselves as a product company in a real estate wrapper driven by relationships and unconventional culture.\nThrough our disciplined approach to capital allocation powered by our data science platform and superior operating results driven by the Welltower Business System, we aspire to deliver long-term compounding of per share growth and returns for our existing investors - our North Star.\nWelltower is committed to leveraging the talent of a diverse workforce to create great opportunities for our business and our people. EOE/AA. Minority/Female/Sexual Orientation/Gender Identity/Disability/Vet","description_format":"text","description_chars":6707,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Real Estate","Senior Living & Assisted Living","Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-06T00:32:13Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 14 · green card filings: 2","filings_12m":14,"filings_prev_12m":5,"green_card_filings_12m":2,"median_offered_wage_usd":110000,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":95,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.946,"p_room":1,"age_days":2,"expected_fill_days":25,"reasons":["conf:1","urgency","win:early","comp:junior"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/welltower-summer-27-intern-cyber-security","json_url":"https://alion.io/job/welltower-summer-27-intern-cyber-security.json","meta":{"generated_at":"2026-11-09T02:01:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4273,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1915088},"rest":"https://alion.io/mcp/rest/get_company?id=1915088"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwelltower-summer-27-intern-cyber-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwelltower-summer-27-intern-cyber-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwelltower-summer-27-intern-cyber-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/welltower-summer-27-intern-cyber-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwelltower-summer-27-intern-cyber-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3845205}},{"tool":"search_jobs","arguments":{"company":"welltower.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3845205},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}