Security Analyst Project Intern (Global Corporate Security Operations Center) - 2027 Start

TikTok's IT security team is responsible for enterprise IT global cyber security, server security, endpoint security, application security construction, and protection work. They work to improve overall IT security capabilities and security posture, providing security processes, security assessments, security operations, and security vulnerability management services. The team also supports IT teams and business departments in meeting their security requirements.

As a Project Intern, you will contribute to impactful short-term projects and gain hands-on experience in a fast-paced, professional environment. This internship offers the opportunity to develop practical skills, apply your knowledge to real-world challenges, and explore your career interests.
Applications are reviewed on a rolling basis, so we encourage you to apply early.

Responsibilities
- Help investigate false positives and suggest improvements to severity tagging and alert disposal logic.
- Join guided threat-hunting exercises based on known TTPs and threat intelligence, and learn how hunts are scoped and documented.
- Learn to map detection logic to frameworks such as MITRE ATT&CK and MaGMa.
- Write small scripts (e.g., Python, PowerShell) that automate repetitive investigation or data-parsing tasks.
- Maintain clear documentation of detections, playbooks, and what you learn so the whole team benefits.

Minimum Qualifications
- Currently pursuing a Bachelor's degree in Computer Science, Cyber Security, Information Systems, or another STEM field.
- Foundational understanding of security concepts through coursework, self-study, labs, or personal projects — e.g., what SIEM, EDR, IDS/IPS, and firewalls do at a high level.
- Basic scripting ability in Python (or similar) — able to write short scripts to parse files, call an API, or automate a simple task.
- Basic knowledge of networking (TCP/IP, DNS, HTTP) and common Windows and Linux operating systems.

Preferred Qualifications
- Hands-on curiosity outside the classroom: home lab, CTF participation, security club, bug bounty, or personal detection/scripting projects.
- Any exposure to detection languages or query languages such as Sigma, EQL, KQL, YARA, Splunk SPL, or SQL.
- Previous internship, part-time job, or volunteering in IT, software development, or security operations.