Intern, Detection & Response

About the Team

The Global Security Incident Response Team (GSIRT) is part of Sony's Corporate Information Security Division (CISD).The Global Security Incident Response Team (GSIRT) helps protect Sony by improving cybersecurity awareness, readiness, and response across the organization.The Cyber Defense Team (CDT)is responsible forstrengthening securityof Sony Group Companiesthrough data onboarding, vulnerability management, threat modeling, purple team activities, automation,incident response, threat hunting, and detection engineering.

Position Summary

Sony Corporation of America (SCA) is seeking afull-time Intern, Detection & Response tojoin the GSIRT CDT team.We are seeking a motivated Cyber Defense Intern to support key initiatives that help keep Sony secure. This role is designed for students who are excited to learn, explore technical concepts, and gainreal-worldexperience in cybersecurity.This internship offershands-onexposure to modern cybersecurity practices while working with a collaborative, experienced team that supports Sony's global operations.

The candidate willassistwithdetectionengineering, security monitoring, incident response,threat research,andbasic automationactivitiesunder the guidance of senior team members.

TheCISDsummer internship program is designed to provide skills, knowledge, and hands-on work experience in the information security and privacy industry, supporting the personal growth of our interns as well as Sony business results.

This 12week summer internship runs from June through August and offers flexibility to work either hybrid or fully remote.

Responsibilities:

Detection & Response

• Support malwareandphishing analysis,threat intelligence analysis, and other incident response effortsas needed.

• Assistin research, build, and maintenance ofdetection capabilities for the latest threats across SIEM correlations and security tool signatures.

• Generate andmaintainhigh quality documentation of research and analysis results, including processes and findings clearly and concisely to both technical and non-technical audiences.

Automation

• Identifysimple, repetitive, or manual tasks suitable for automation.

• Contribute to improving Cyber Defense Team workflows through automation and orchestration.

AI Support

• Contribute to writing prompts for AI models (such as Copilot) that can be incorporated into day-to-day activities.

Project Support

• Assistwith project related work, as assigned.

General Support

• Design, implement, and present a capstone project related to detection engineering and/or incident response.

• Collaborate effectively with a geographically distributed Cyber Defense Team.

• Perform other cyber defense-related duties as assigned.

Honesty, trustworthiness, and ethical conduct are material requirements for the responsibilities outlined above.

Qualifications:

• Current student pursuing a bachelors or master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

• Demonstrated interest in cybersecurity and information technology.

• Basic understanding of computer systems, operating systems, and networking concepts.

• Ability to follow procedures, work independently, manage priorities, and communicate clearly.

• Strong communications skills and willingness to learn, adapt, and take initiative in a fast-paced environment.

• All candidates mustbe authorized towork in the USA.

Bonus Skills (Not Required)

These are helpful but not expected-great for students who want to grow into them:

• Familiarity with Splunk's Search Processing Language (SPL).

• Familiarity with writing prompts for AI models.

• Interestin AI/ML, automation, and workflow optimization.

The hourly rate for this internship depends on education level: $24.00 per hour for undergraduate candidates and $25.00-$27.00 per hour for graduate candidates. The individual will be paid hourly and eligible for overtime.

#LI-SC1