Security Engineer - Intern
Foresite
Overland Park, KS, USA
Posted on Jan 18, 2026
Role Overview
As a Security Engineer Intern for the SecOps platform, you will sit at the intersection of threat research and automation. Your primary mission is to build the "intellectual tissue" of our SIEM/SOAR product. You won't just be monitoring alerts; you will be building the logic that detects threats and the automation that neutralizes them.
Key Responsibilities (The "Content" Stack)
As a Security Engineer Intern for the SecOps platform, you will sit at the intersection of threat research and automation. Your primary mission is to build the "intellectual tissue" of our SIEM/SOAR product. You won't just be monitoring alerts; you will be building the logic that detects threats and the automation that neutralizes them.
Key Responsibilities (The "Content" Stack)
- Detection Engineering: Write and test correlation rules to identify malicious patterns such as lateral movement and data exfiltration.
- SOAR Playbook Development: Design and implement automated workflows (Playbooks) to automate incident response.
- Log Parsing: Create and maintain Parsers to ensure diverse data sources are correctly mapped to our Unified Data Model (UDM).
- Visual Analytics: Build intuitive Dashboards for real-time visibility into threat landscapes.
- Google Cloud Certifications: Gain full, free-of-charge access to Google Cloud certification exams (e.g., Professional Cloud Security Engineer or Associate Cloud Engineer) including all necessary study materials and lab credits.
- Job Progression: This internship is designed as a pipeline for full-time roles. High-performing interns will have a clear pathway to transition into Junior Security Engineer or Associate SOC Analyst positions upon graduation.
- Mentorship: Direct 1:1 mentorship with senior security architects to guide your technical growth.