Cybersecurity Consulting Internship – AI-augmented SOC

In a context of continuous increase in alert volume, increasing complexity of hybrid environments, and pressure on cyber profiles, Security Operations Centers must evolve their operational models. Historical approaches based on SIEM, SOAR, EDR/XDR, and predefined playbooks are reaching their limits in the face of analytical fatigue, operational noise, and multi-source investigation needs. Artificial intelligence — particularly generative AI and agentic AI — opens new perspectives to accelerate triage, enrich investigations, automate certain tasks, assist incident response, and transform the role of SOC analysts.

How is AI transforming the technologies and processes dedicated to the supervision of information systems security, while maintaining a level of control, explainability, and risk management adapted to the requirements of organizations?

1. Internship objective
2. The study phase

Reporting to the Swiss office of Wavestone, the objective of the internship is to conduct a prospective and operational study on AI-augmented SOCs, by analyzing the impact of AI on the market, priority use cases, the evolution of traditional vendors, the emergence of specialized solutions, and the real value brought by the automation of SOC operations and the integration of AI agents.

Preparatory work:

Achieving the objectives requires preparatory work on the following points:

• Frame the key notions of an AI-augmented SOC: SIEM, SOAR, XDR, UEBA, alert triage, automated investigation, assisted threat hunting, generative AI, agentic AI, and specialized agents.
• Identify the main families of solutions on the market: AI features integrated into historical platforms, security copilots, AI-native solutions dedicated to the SOC, investigation agents, and MSSP-oriented solutions.
• Analyze practices observed among our clients and mature organizations: SOC staffing models, automation levels, SIEM/SOAR/XDR integration, AI decision governance, explainability requirements, data sovereignty, and measurement of operational gains.

We offer an internship structured around the following objectives:

1. Objective 1:

• Evaluate the impact of AI on SOC organization by identifying the main use cases: alert summarization and prioritization, automatic enrichment, multi-source correlation, query generation, assisted threat hunting, production of incident summaries, response recommendation, and partial automation of operational activities.

1. Objective 2:

• Build a structured benchmark of AI-augmented solutions for SOCs, comparing traditional vendors and new entrants according to their capabilities in autonomy, depth of investigation, integration with the existing ecosystem, explainability, governance, data security, and operational return on investment.

1. Objective 3:

• Conduct one or more POCs on representative solutions, ideally centered on the automation of SOC processes or the integration of AI agents, in order to concretely evaluate the quality of triage, the reliability of recommendations, orchestration capacity, operational limits, and industrialization conditions.

1.

1. Contributions to the consulting firm

As a trainee consultant, you will also be required to contribute to the operational missions of our clients.

We also give you the opportunity to participate actively in the internal life of the firm through:

• Supporting the development of our Cybersecurity expertise: contribution to prospecting actions and the development of commercial proposals
• Production of actor radars aimed at better understanding responsible digital actors
• Production of materials aimed at acculturating the firm's employees to the concepts of augmented SOC, agentic AI applied to security operations, and controlled automation of SOC processes
• Participation in company events: afterworks, organized recreational activities and outings, meetings with market actors, etc.

A student in a Master's program within a major engineering school or university in Switzerland, you are attracted to consulting and business transformation issues. You are convinced of the necessity of addressing the cybersecurity challenges of large groups.

You also possess the following skills:

• Curiosity, sharp analytical spirit, and the ability to master new subjects
• Client orientation, excellent interpersonal skills, and a sense of service
• Taste for challenges and results
• Attraction to entrepreneurship and innovation

Furthermore, you want to be an actor in an ambitious, rapidly growing business project in Switzerland and internationally. You want to put your enthusiasm at the service of a firm that will be able to offer you rapid responsibility.

Join an international consulting firm that supports major strategic transformations.

We are Wavestone: passionate and solution-oriented experts, who place humans at the heart of performance and growth. Ambitious and in full expansion, we constantly develop our portfolio of clients and projects, with an international reach and a real desire to generate a positive impact.

Are you a true team player, driven by strong values? Are you curious and determined, with the desire to learn every day? Are you the type to take on challenges without hesitation? Then you are in the right place. Join Wavestone and express your potential in a stimulating and collaborative environment, where today's challenges are transformed into tomorrow's opportunities.