Learning the Ropes: An Intern Review with Cierra Moret
This is my Spring 2024 review of my journey into cybersecurity and my internship at Ingall's Information Security. Throughout this period, I've gained valuable insights into threat detection, incident response, and network security practices. I've had the opportunity to work with cutting-edge security tools, collaborate with experienced professionals, and contribute to real-world security initiatives. Overall, it has been an enriching experience that has strengthened my passion for cybersecurity and prepared me for future challenges in the field.
What have you learned about working within a SOC during this internship?
Staying vigilant is essential when working within a SOC. The SOC serves as the central defense hub once preventive measures are implemented on a network. Understanding alerts, using security tools effectively, staying updated on the latest threats, thoroughly documenting incidents, and, above all, communicating are all critical components of operations.
What has been the most interesting technique you've seen a threat actor attempt?
Phishing emails always grab my attention. It's astonishing how far threat actors will go to gather credentials. One of the most intriguing techniques I've seen involved a threat actor spoofing a Microsoft login page and automatically transferring the user's email credentials to the username input, making it appear as if it were the legitimate login site. All the user had to do was enter their password and press login. This incident underscores the importance of comprehensive user education and training.
How has this internship influenced your outlook and career path in cybersecurity?
This internship has greatly influenced my outlook and career path in cybersecurity. It has given me practical, hands-on experience and exposure to various aspects of cybersecurity, such as threat analysis, incident response, and security operations. Through mentorship, I've gained valuable insights into the real-world challenges and complexities of cybersecurity. One thing is for sure: cybersecurity is dynamic, and I am ready to tackle all the challenges it presents.
What are your favorite resources for what's happening in cybersecurity?
My go-to sources for staying updated on cybersecurity trends are Security Weekly on YouTube, ITSecurityGuru.org, and AHA.org. As my primary job is in health tech, I find AHA to be a reliable source for all things health-related, including cybersecurity threats and attacks on healthcare systems.
What are your upcoming activities/educational goals for the next year?
In the upcoming year, my activities/educational goals include obtaining my Security+ certification, acquiring AWS cloud certifications, securing an entry-level position in cybersecurity, and the most fulfilling goal is completing my senior year of my computer science degree. I'm genuinely excited as I'm nearing the end of my degree program!
What do you enjoy doing in your free time to reach a work-school-life balance?
Honestly, I'm currently juggling multiple things. I am a human load balancer. I wear many hats, but I make sure everything gets done effectively. With my son involved in multiple sports, we're often on the road during the week for his games. On weekends, we love exploring festivals and enjoying Louisiana's delicious cuisine.
Cierra Moret