Cyber Security Intern - SOC & Cloud Security

About the role

Tencent Overseas IT is looking for a Cyber Security Intern to join its Security Engineering team in London. This is a hands-on placement covering Security Operations (SOC), cloud security, vulnerability management, incident response and security engineering. You will work alongside experienced Senior Security Engineers and gain exposure to enterprise security technologies such as Microsoft 365, firewalls, Slack, cloud services and endpoint security.

Key responsibilities

• Assist with Tier 1 SOC alert triage, investigation and escalation using Microsoft Sentinel and other security monitoring platforms.
• Analyse alerts from firewalls, Microsoft 365, Slack and other cloud services to investigate potential security incidents.
• Perform log analysis across SIEM and cloud platforms to identify suspicious activity.
• Support vulnerability management by validating findings, helping with remediation and coordinating with internal IT teams.
• Support security reviews and risk assessments for new initiatives, including AI tools, AI agents and third-party SaaS integrations.
• Help implement, test and validate security controls such as firewall, email and endpoint protection, and cloud security posture management.
• Take part in simulated cyber exercises, phishing simulations and purple team activities.
• Research emerging threats and document incidents, investigations and recommendations for Senior Security Engineers.
• Support compliance initiatives aligned with standards such as ISO 27001, Cyber Essentials Plus and GDPR.
• Contribute to continuous improvement of SOC processes, documentation, automation and monitoring.

Required profile

• Currently studying Cyber Security, Computer Science, Information Security or a related degree.
• Strong interest in cyber security, cloud technologies and enterprise IT.
• Basic understanding of networking concepts (TCP/IP, DNS, HTTP, VPN).
• Familiarity with Windows, Microsoft 365 and cloud collaboration platforms.
• Strong analytical thinking, attention to detail, written and verbal communication, teamwork and eagerness to learn.

Required skills

• Desirable: knowledge of SIEM platforms such as ElasticSearch.
• Desirable: basic scripting with PowerShell or Python, and knowledge of vulnerability management and the MITRE ATT&CK framework.
• Desirable: knowledge of Azure, AWS or GCP, and experience with security automation or scripting.