Security Engineer - Intern

COGNNA is redefining modern cybersecurity with Nexus, our Agentic AI SOC platform, and our Smart MDR services. We help organizations across the region and around the world cut alert noise, respond to incidents faster and stay compliant with frameworks such as SAMA, NCA, ISO 27001 and PCI DSS.

Behind it all: AI-driven triage, deep automation and our elite 24/7 Guardians Team, delivering unified visibility and rapid threat containment across endpoint, cloud and network.

We are looking for a motivated Security Engineer Intern to join our Security Engineering team. This intern position is centered on building, integrating, and operating the tools and platforms that power our security operations—connecting data sources, automating workflows, and strengthening how we detect, manage, and respond to risk.

Responsibilities

• Stack & Data Integration: Support the integration and onboarding of new data sources, tools, and platforms into our security stack.
• Pipeline Maintenance: Help configure, tune, and maintain log collection, detection, and alerting pipelines across on-prem and cloud environments.
• Incident & Forensics Support: Assist in deploying and integrating tooling used for investigation, evidence collection, and forensic analysis during security incidents.
• Vulnerability Management: Support the rollout and integration of vulnerability scanning tools, and help track, prioritize, and report on findings across systems.
• Cloud Infrastructure: Contribute to securing and integrating tooling across cloud infrastructure, including identity, access, and configuration management.
• Scripting & Automation: Write scripts and automation to connect tools, reduce manual work, and improve data flow between security systems.
• R&D & Prototyping: Research and prototype new tools, integrations, or workflows to improve the team's detection, response, and risk management capabilities.
• Documentation: Prepare clear technical documentation and reports summarizing integrations, findings, and recommendations.

• Education: Currently pursuing or recently completed a degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Core Technical Knowledge: Solid understanding of networking, operating systems (Windows/Linux), and core security concepts.
• Scripting Skills: Familiarity with scripting or programming (e.g., Python, Bash, PowerShell) for automation and tool integration.
• API Interest: Interest in APIs and system integration—connecting different tools and platforms so data flows smoothly between them.
• Analytical Mindset: Strong analytical thinking, curiosity, and a genuine interest in security engineering.
• Communication: Good communication skills and ability to document technical work clearly.

Bonus points

• Exposure to digital forensics and incident response (DFIR) concepts and open-source or commercial investigation tooling.
• Understanding of log management, detection engineering, or SIEM/SOC concepts.
• Awareness of vulnerability scanning and risk-based vulnerability management practices.
• Basic knowledge of public cloud platforms (e.g., Google Cloud, AWS, or Azure) and cloud security fundamentals.

• Hands-on mentorship from experienced security engineers.

• Real-world exposure to enterprise-grade security tools and how they integrate into a live security stack.

• Practical experience across tooling integration, cloud security, and security research.

• Opportunity to contribute to production security projects and build a strong security engineering portfolio.