Cybersecurity Incident Response Intern

Overview

We are looking for an intern to join our Incident response team! The Cybersecurity Incident Response (IR) Intern will work among a team of skilled cybersecurity practitioners in the Cyber Fusion Center (CFC) to tackle potential or confirmed security incidents. This is an entry-level position with the intention of training and advancing analysts within PepsiCo's CFC team.

Why should you join us?

• You will have opportunities to support various CFC functions in their duties as required.
• You will develop the required expertise, knowledge and ability to perform independently.
  
  

What kind of manager is Nicolas?

Nicolas has led the Warsaw IR team for the last 5+ years and has strong background and technical knowledge. You can learn from him how to handle any type of cybersecurity incident while having strong support from the team and leadership. His 10 team members gave him the highest score as a manager for the last years. As a person he is patient, good listener and tolerant.

What do we offer?

• Paid 1 year full-time contract (starting from July 1st 2025).
• We work in a hybrid model (2 days from the office in Warsaw, Plac Konesera, 3 days from home).
• Benefits, such as: Multisport card, private healthcare, life insurance, private pension plan, employee assistance program.
• Feedback, mentorship and support from experienced colleagues.
• Possibility to gather experience from multiple Cybersecurity functions, with their specific roles and tasks.
• Opportunity to make the first step to develop a long-term career in a global FMCG business.
  
  

Responsibilities

What are your daily tasks?

• You’re enriching, investigating and assessing incoming security alerts as Tier1.
• You’re assisting IR queue sweeper on daily duties.
• You’re performing incident review, identifying potential gaps, risks or trends, and delivering measurable data back to management along with recommendations.
• You’re studying in lab the artifacts generated by selected applications or protocols, and refining IR methodology accordingly.
• You’re taking part in IR toolkit testing framework’s design and execution.
• You’re performing a comprehensive review of IR Knowledge Base (e.g. process validation, identification of missing or inaccurate data) and creating new content in alignment with the team’s need.
• You’re establishing a framework to leverage YARA during incident lifecycle.
  
  

Qualifications

Who are we looking for?

• Ambitious and independent students in their last year of study or just graduated. (Computer Science or Engineering or similar IT field study)
• Good understanding of Information Technology systems and architecture (e.g. Windows OS, networking, web applications).
• Some experience within Cybersecurity (e.g. frameworks, processes, systems, tools).
• Some technical knowledge of incident response/SOC operations and tools (e.g. SIEM, AV, EDR).
• Good written/verbal English communication skills.
• Strong analytical mindset.
• Well organized, with task & time management skills.
• Candidates adapting quickly to changing circumstances.
• Proactive attitude, seeking for improvement opportunities.
• Curious and motivated problem solvers with a sense of humour.