TechBizAcademy
Blue Team · Defensive

SOC Analyst Internship

A hands-on 6-week internship that trains you as a Security Operations Center (SOC) analyst: log analysis, SIEM, threat detection, alert triage, and incident response. Complete weekly tasks, get evaluated by our analysts, and earn the Certified SOC Analyst credential.

6 weeks 100% hands-on Mentor-evaluated Certified SOC Analyst Free
Compare both programmes

What is the SOC Analyst Internship?

The SOC Analyst Internship is a free, 6-week, fully online, hands-on programme from TechBiz Academy — the training arm of TechBiz Security. Interns complete weekly practical tasks, submit a written report for each, and receive mentor feedback and a grade. Finishers earn the verifiable Certified SOC Analyst credential. It is designed for students and career-changers moving toward a SOC Analyst role.

SOC Analyst Internship at a glance

CostFree — no course fee
Duration6 weeks
FormatFully online, self-paced within weekly deadlines
Practical tasks18 graded tasks, each with a written report
Time commitmentAbout 8–12 hours per week
PrerequisitesNone — starts from fundamentals
Tools usedWireshark, Splunk/Wazuh, Linux and Windows event logs, MITRE ATT&CK
AssessmentEvery task reviewed and graded by a working security engineer
CredentialCertified SOC Analyst — verifiable online by ID
Open toStudents worldwide; taught in English
ProviderTechBiz Academy, the training arm of TechBiz Security

What you'll learn

SIEM & log analysis
Alert triage & threat detection
Incident response
Security monitoring

Programme syllabus

The actual weekly tasks in this internship, in order.

Week 1
  • Week 1 · Task 1 — Cyber Security Intro + What is a SOC?
  • Week 1 · Task 2 — Networking Basics for Defenders
  • Week 1 · Task 3 — Lab Setup — VirtualBox + Kali/Ubuntu + Windows VM
Week 2
  • Week 2 · Task 4 — Linux Basics + Log Files (/var/log)
  • Week 2 · Task 5 — Windows Logs & Event Viewer (Event IDs)
  • Week 2 · Task 6 — Understanding Logs & Log Analysis Basics
Week 3
  • Week 3 · Task 7 — Malware Types & Common Attacks
  • Week 3 · Task 8 — Cyber Kill Chain + MITRE ATT&CK Intro
  • Week 3 · Task 9 — Network Traffic Analysis — Wireshark Basics
Week 4
  • Week 4 · Task 10 — What is SIEM? + Install Splunk / Wazuh
  • Week 4 · Task 11 — Ingest Logs into SIEM + Basic Searches
  • Week 4 · Task 12 — SIEM Dashboards & Alerts
Week 5
  • Week 5 · Task 13 — Phishing Email Analysis
  • Week 5 · Task 14 — Threat Intelligence & IOCs
  • Week 5 · Task 15 — Incident Detection — Investigate an Attack in Logs
Week 6
  • Week 6 · Task 16 — Incident Response Process (NIST Phases)
  • Week 6 · Task 17 — Hands-on Investigation (LetsDefend / CyberDefenders)
  • Week 6 · Task 18 — CAPSTONE — Full Incident Investigation + Report

How it works

1. Enroll free

Create an academy account and join the programme — no fee, no payment details.

2. Weekly tasks unlock

Tasks open on a fixed schedule. Each has a clear brief and a deadline.

3. Submit your report

Do the practical work and upload a PDF report for each task.

4. Get graded & certified

Mentors review and score your work. Finish and you earn the Certified SOC Analyst.

Frequently asked questions

Is the SOC Analyst Internship free?
Yes. The programme is free to join. You complete weekly tasks, your work is reviewed by TechBiz mentors, and there is no course fee.
How long is the internship?
6 weeks. Tasks are released on a fixed weekly schedule and each task has its own submission deadline.
Do I get a certificate?
Yes. After you complete the programme and your work is approved, you receive the Certified SOC Analyst credential, which can be verified online from the TechBiz Academy certificate verification page.
What are the prerequisites?
Basic computer literacy and networking familiarity are enough to start. The tasks build up from fundamentals, so beginners and university students can follow along.
Is the work practical or theory-based?
Practical. Each week you complete hands-on tasks and submit a report as a PDF, which a TechBiz mentor reviews and grades.
Can I do the SOC Analyst Internship online?
Yes, it is fully online. Tasks are released to your dashboard, you work at your own machine, and you upload each report as a PDF. There is nothing to attend in person and no location requirement.
Do I need a degree or prior experience?
No. There is no degree requirement and no prior security experience is needed. The programme starts from fundamentals in week one and builds up, which is why university students and career changers can follow it.
What tools will I use?
Wireshark, Splunk or Wazuh for SIEM, Linux and Windows event logs, and the MITRE ATT&CK framework, inside a VirtualBox lab you build yourself. Everything used is free or has a free tier.
How much time does it take each week?
Plan for roughly 8 to 12 hours a week. Tasks unlock on a fixed schedule and each stays open for 48 hours, so you choose when within that window to do the work.
Is the certificate verifiable by an employer?
Yes. Every certificate carries a unique ID that anyone can check on the TechBiz Academy verification page, so an employer can confirm it without contacting you.
What happens after I finish?
You finish with 18 completed practical tasks, a written report for each, and a verifiable certificate. Top performers also receive a Letter of Recommendation, and the work itself is what you put on a CV or LinkedIn.

Ready to start?

Join the SOC Analyst Internship and start your first task this week.

Looking for professional security services instead? Explore TechBiz Security services.