Intern

As our use of AI continues to expand across the organization, I believe it is important that we begin developing practical experience using AI to support our own security operations. While we have invested heavily in preventative security controls, the industry is rapidly shifting toward attacks that leverage legitimate credentials, authorized access, and AI-assisted techniques. Detecting these types of events increasingly depends on our ability to correlate activity across multiple data sources rather than relying solely on preventative technologies.

The internship would focus on building foundational capabilities in this area, including:

• Research and evaluate methods for securely collecting security logs from our key security platforms through APIs.
• Develop an automated process to normalize and securely store log data in OneDrive/SharePoint for analysis.
• Assist with building an AI-assisted workflow to correlate events across multiple security technologies and identify suspicious activity that may not be visible within a single platform.
• Develop prototype dashboards and reports that highlight unusual behavior, trends, and potential indicators of compromise.
• Evaluate opportunities to leverage AI to improve security investigations, reduce manual effort, and accelerate incident response.
• Document the architecture, workflows, and operating procedures so the capability can continue to mature after the internship.

The objective is not simply to complete a short-term project, but to begin establishing an AI-enabled security operations capability that positions our team to respond to the evolving threat landscape. This work would also provide a foundation for future continuous monitoring and threat detection initiatives.

I believe this effort aligns well with our broader AI strategy while providing meaningful hands-on experience for the intern and long-term value for the security program.