SOC Co-Op

Who is DeepSeas

DeepSeas owns cyber risk for its clients: autonomously, continuously, and with proof. The company brings security technology, threat intelligence, and expert practitioners together to deliver coordinated cyber defense, helping organizations strengthen protection while reducing the work required of their internal teams.

Combining agentic AI with human judgment, DeepSeas automates threat analysis and response within client-defined boundaries, continuously improves defenses through threat hunting and detection engineering, and provides visibility into investigations, actions taken, and service performance. Its technology-agnostic approach works with the security investments clients already have.

DeepSeas connects 24/7 managed detection and response with offensive security, vulnerability management, governance, risk and compliance, CISO advisory, and incident response. With 30 years of experience in cyber defense, DeepSeas is trusted by nearly 1,000 clients around the world, including Fortune 100 enterprises and mid-market organizations. Its team of more than 250 cybersecurity professionals serves clients across 30+ countries.

Frost & Sullivan recognized DeepSeas as an Innovation Index standout in its 2025 Frost Radar™ for Managed Detection and Response and awarded the company its 2024 Competitive Strategy Leadership Award in the global MDR market.

Defend Like You Know What’s Coming™

Learn more at deepseas.com 

Position Summary

The SOC Co-Op supports the DeepSeas Security Operations Center during a structured co-op term, gaining hands-on experience in a live managed detection and response (MDR) environment. Working alongside experienced SOC analysts, the Co-Op assists with alert monitoring, triage, investigations, threat research, and documentation while learning how DeepSeas detects and responds to threats for clients around the world. This role is ideal for a current student who wants to build a strong foundation in security operations through real-world experience.

Key Responsibilities

• Monitor security alerts and events across SIEM and EDR platforms under the guidance of senior SOC analysts.
• Assist with initial alert triage, gathering relevant log data and context to support investigations.
• Document findings, investigation steps, and ticket updates accurately in the case management system.
• Support phishing analysis by reviewing reported emails, headers, links, and attachments in a safe environment.
• Research indicators of compromise (IOCs), threat actor tactics, and emerging threats using threat intelligence sources and the MITRE ATT&CK framework.
• Help maintain and update SOC playbooks, runbooks, and process documentation.
• Assist with threat hunting and detection tuning projects alongside senior analysts and detection engineers.
• Shadow senior analysts during incident response activities to learn investigation, containment, and remediation processes.
• Help prepare metrics and summaries for internal reporting and client deliverables.
• Perform other SOC projects and duties as assigned.
• This position is open only to U.S. citizens who currently reside within the United States.

Experience, Education, and Skills Required

Minimum Qualifications

• Currently enrolled in a bachelor's degree program in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Eligible to participate in a co-op program through a college or university.
• Foundational understanding of networking concepts (TCP/IP, DNS, HTTP/S) and common security threats.
• Familiarity with Windows and Linux operating systems.
• Strong analytical and problem-solving skills with attention to detail.
• Clear written and verbal communication skills.
• Eager to learn, take initiative, and accept feedback.

Preferred Qualifications

• Coursework, labs, or hands-on experience with SIEM or EDR tools (e.g., Microsoft Sentinel, Splunk, CrowdStrike, SentinelOne).
• Familiarity with the MITRE ATT&CK framework and the incident response lifecycle.
• Basic scripting experience in Python, PowerShell, or Bash.
• Participation in Capture the Flag (CTF) competitions, cybersecurity clubs, or home lab projects.
• Entry-level certification or progress toward one, such as CompTIA Security+, CySA+, or Network+.

Information Security Responsibility

Information security is everyone's responsibility. This includes:

• Understanding and following DeepSeas's information security policies and procedures.
• Remaining vigilant and reporting any suspicious activity or possible weaknesses in DeepSeas's information security.
• Actively participating in DeepSeas's efforts to maintain and improve information security.

DeepSeas considers this position as [Low / Moderate / High] Risk with a high potential of viewing, accessing, or downloading restricted or private client/internal data. This information must be treated with sensitivity and in the most secure manner. HR reserves the right to perform random background/drug screens to ensure the safety of client/DeepSeas data.

Why DeepSeas?

• Join a strong, profitable industry leader in one of the highest-growth industries around.
• Make a direct impact on both our clients' security programs and our company culture — your opinions matter and are heard.
• A collaborative culture that respects and appreciates you for your unique skills.
• A tight-knit team that supports you in doing your best work while enjoying your work life.
• Hands-on experience in a live Security Operations Center alongside experienced analysts.
• Variety of projects — you won't get bored.
• Flexible work schedule and casual work environment.