Threat Detection COOP

About the Internship

COGNNA is offering a Threat Detection COOP internship in Medina for individuals with 0-1 years of experience. This internship focuses on developing high-impact detection strategies, building automation, and enhancing Security Operations Center (SOC) capabilities. The role involves collaboration with threat intelligence, incident response, and platform engineering teams, and offers opportunities to mentor emerging cybersecurity talent.

Key Responsibilities

• Advanced Threat Detection Engineering: Build high-fidelity correlation rules and behavioral detections within COGNNA security platforms. Translate adversary TTPs (MITRE ATT&CK), threat intelligence, and vulnerability data into actionable logic. Identify detection gaps and integrate new data sources to address evolving threat landscapes. Automate detection testing and maintain detection quality.
• Platform Engineering & Optimization: Contribute to the architecture and optimization of XDR, SIEM, and SOC technology stacks for scalability and resilience. Streamline log ingestion pipelines, including parsing, normalization, and enrichment. Develop scripts and automations (Python, PowerShell) to improve SOC efficiency. Integrate tools across the SOC stack to facilitate seamless workflows and response.
• Threat Hunting & Incident Response: Collaborate with intelligence and incident response teams to enrich detection use cases and support threat hunting activities. Provide Tier-3+ support for incident investigations and post-mortem analysis.
• Mentorship & SOC Maturity: Improve SOC playbooks, Standard Operating Procedures (SOPs), and detection engineering workflows. Stay informed on global and regional threats to adapt detection strategies accordingly. Ensure compliance with relevant standards such as NCA ECC and SAMA CSF.

Qualifications and Experience

• 0-1 years of experience in a related field.
• Understanding of threat detection principles and security operations.
• Familiarity with scripting languages such as Python or PowerShell is beneficial.
• Knowledge of security platforms like XDR and SIEM is an advantage.

Work Environment and Benefits

This internship is based in COGNNA's office in Medina, promoting on-site collaboration with experienced professionals. Interns will have the opportunity to contribute to products that impact cybersecurity globally. The company supports continuous growth through access to certifications, trainings, and opportunities to enhance expertise. COGNNA fosters a culture that empowers talent, encourages ownership, and recognizes outcomes.