Blue Team / Cybersecurity Intern

About the Internship

American National's Summer Internship Program provides students with meaningful, real-world corporate experience while helping build a strong, long-term talent pipeline for the company. The program blends hands-on, role-related project work with intentional learning, leadership exposure, business education, and relationship-building opportunities. The 2027 summer internship program runs Monday, May 24 through Friday, August 6, with an optional extension to August 13.

Team Description

The Blue Team helps protect American National's systems, applications, and data through continuous security monitoring, threat hunting, incident response, and security tool management. As part of a team that is actively implementing and enhancing cybersecurity platforms, you'll gain exposure to real-world security operations while working alongside experienced analysts and security professionals.

What You'll Do

• Learn how a corporate Security Operations Center (SOC) monitors and investigates cybersecurity threats
• Shadow analysts during incident response and security investigations
• Assist with threat hunting, security monitoring, and operational activities
• Support the implementation, configuration, and tuning of cybersecurity tools
• Help create dashboards, reports, and analytics to support security operations
• Participate in team meetings, monitoring rotations, and collaborative cybersecurity projects
• Work with multiple technology teams as new security capabilities are implemented across the organization

Skills You'll Build

• Security Operations Center (SOC) fundamentals
• Threat hunting and security monitoring techniques
• Incident response processes and procedures
• Security analytics, reporting, and dashboard development
• Cybersecurity investigation and analytical skills
• Hands-on experience with enterprise security tools and platforms
• Collaboration and communication skills in a corporate cybersecurity environment

Tools and Technical Exposure

• Microsoft Sentinel
• Microsoft XDR
• Abnormal AI
• KnowBe4
• Acalvio ShadowPlex Deception Platform

Qualifications

• Pursuing a degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Strong understanding of network protocols
• Basic knowledge of Windows administration, processes, and services
• Familiarity with the CIA Triad, malware, phishing, identity and access management (IAM), and endpoint security concepts
• Understanding of SIEM platforms and the importance of log analysis
• Basic knowledge of Azure and AWS cloud concepts
• Strong verbal and written communication skills
• Sound problem-solving, analytical, and decision-making abilities
• Self-motivated with the ability to take initiative and work independently
• Strong organizational skills, attention to detail, and commitment to accuracy
• Ability to meet deadlines, manage multiple priorities, and adapt to changing needs

Eligibility Requirements

• Enrolled in an accredited college or university
• Junior standing or higher by the start of the internship; May 2027 graduates are welcome
• Minimum cumulative GPA of 3.0
• Available to work 37.5 hours per week, Monday through Friday
• Able to work onsite at the posted role location (League City, TX)

Pay and Schedule

• Paid hourly with a full-time schedule of Monday through Friday, 37.5 hours per week
• Program dates: May 24 through August 6, 2027 (optional extension to August 13)

Benefits

• Multiple medical plan options
• Dental and vision coverage
• Basic life insurance
• Health savings accounts
• Company-funded 401(k) plan (automatic enrollment)
• Paid time off and holidays
• Inclusive, people-first culture with flexibility, work-life balance, and professional growth opportunities
• Casual dress environment