Verified IT Work Experience Program

SOC Analyst & Digital Forensics Engineering Internship

Defend enterprise cloud and hybrid environments, analyze security events with Splunk, and execute incident response playbooks.

3 - 6 Months
Online / On-site
Experience Letter + LOR
1-on-1 Lead Mentorship
Apply for Internship Download Brief

Role Overview

Train in our real-time Security Operations Center (SOC) lab. You will ingest production logs into Splunk and Elastic, hunt active threat actors across Windows and Linux endpoints, analyze PCAP network packets, write Sigma detection rules, and execute complete digital forensics incident investigations.

Tools & Stack You Will Use

SIEM Engineering (Splunk & Elastic) MITRE ATT&CK Framework Mapping Network Traffic Analysis (Wireshark/Zeek) Host & Endpoint Forensics (Sysmon/Velociraptor) Incident Response Playbooks Threat Intelligence & IOC Triage YARA & Sigma Detection Rules SOC Workflow & Ticket Management

What You Will Receive

  • Verified Experience Certificate: Company-issued credential recognizing duration.
  • Letter of Recommendation (LOR): Signed recommendation from tech lead for top performers.
  • Production GitHub Repos: Live pull requests, commits, and verified public repositories.
  • Interview & Placement Support: Direct client interview opportunities & referrals.

Eligibility & Candidates

  • Final year & pre-final engineering/IT students
  • Fresh graduates looking for company experience
  • Career switchers seeking real-world portfolios

Commercial Projects You Will Build

Real-world product blueprints and enterprise deliverables

1 Enterprise SOC Architecture & Telemetry Ingestion

Live Milestone
  • SOC Tier 1/2/3 workflows, alert lifecycles & escalation protocols
  • Windows Event Logs, Linux auth logs, Syslog-ng & cloud audit trail collection
  • Endpoint telemetry collection using Microsoft Sysmon & OSQuery
  • Ingesting and normalizing diverse telemetry into Splunk Enterprise and Elastic SIEM

2 Log Analysis & SIEM Querying with SPL & EQL

Live Milestone
  • Splunk Search Processing Language (SPL): Piping, filtering, stats, eval & timecharts
  • Detecting brute force attacks, suspicious PowerShell executions & privilege escalations
  • Elasticsearch Query Language (EQL) for hunting lateral movement across endpoints
  • Building real-time SOC monitoring dashboards and customized alert threshold triggers

3 Deep Packet Inspection & Network Intrusion Analysis

Live Milestone
  • Analyzing PCAP captures with Wireshark, TShark & NetworkMiner
  • Identifying command-and-control (C2) beaconing, DNS tunneling & data exfiltration
  • Network security monitoring with Zeek (Bro) and Suricata IDS/IPS alerts
  • Deciphering TLS handshakes, SNI inspection & identifying anomalous outbound ports

4 Threat Intelligence & MITRE ATT&CK Hunting

Live Milestone
  • Mapping adversary tactics, techniques & procedures (TTPs) to MITRE ATT&CK
  • Threat intelligence platforms (MISP, AlienVault OTX) and automated IOC feeds
  • Writing custom Sigma rules for universal SIEM threat detection
  • Crafting YARA signatures to detect malware payloads and web shells on disk

5 Digital Forensics & Incident Response (DFIR)

Live Milestone
  • Host triage: Memory acquisition and volatile data analysis using Volatility 3
  • Disk artifact analysis: MFT records, Windows Registry hives, Shimcache & Amcache
  • Investigating real-world ransomware outbreaks and credential dumping (Mimikatz)
  • Executing containment playbooks: Network isolation, credential revocation & eradication

6 Live Enterprise Cyber Range Defense & Capstone

Live Milestone
  • Simulated multi-stage APT attack in our high-tech cyber range environment
  • Conducting live alert triage, containment, root cause analysis & formal incident reporting
  • Automating SOC playbooks with SOAR concepts (Shuffle / Tines)
  • Commercial Capstone Defense: Enterprise Cyber Attack Post-Mortem & SOC Portfolio

Agile Work Culture & Daily Routine

How you collaborate inside your developer pod each week

1

Daily Standups & Sprints

Participate in 15-minute morning standups, track sprint backlog items in Jira, and define daily feature goals.

2

Feature Engineering

Write clean, modular code following design patterns, database migrations, and API contract specifications.

3

PR Reviews & Quality Gates

Submit GitHub pull requests, receive 1-on-1 feedback from senior tech leads, and pass automated CI test pipelines.

4

Cloud Staging & Demo

Deploy live containerized features to cloud staging environments and demonstrate working software during sprint reviews.

Local Internship Campuses & Dev Centers

In-person & hybrid developer seats in Coimbatore & Chennai

Coimbatore • Internship

SOC Analyst & Digital Forensics
Chennai • Internship

SOC Analyst & Digital Forensics
Limited Seats Per Batch

Start Your Professional Journey Today

Join our SOC Analyst & Digital Forensics Engineering Internship and gain verified company work experience, senior mentorship, and a production-grade portfolio.

Apply for Internship Explore All Tracks