University of Alabama students are gaining experience in the cybersecurity industry, preparing for careers after graduation, without even leaving campus. As members of the first cohort of the workforce development program in UA’s Security Operations Center, eight students are working alongside the Office of Information Technology and TekStream analysts to fight cyber threats to campus.
First Line of Defense
Cybersecurity threats, such as email phishing and spam, are a reality for all organizations, and the University is no different. OIT’s cybersecurity team works around the clock with vendor partners to keep University data safe.
OIT staff and the student interns are the first to see potential issues as they arise. They collaborate on finding solutions or deciding if the issue needs to move to the team at TekStream, a cybersecurity solutions vendor working with UA, or the OIT Security team.
“We use industry-leading security platforms from Splunk and Microsoft, where the students monitor security alerts,” said Taylor Anderson, OIT’s chief information security officer. “The students are part of a Slack channel with TekStream, so they’re in constant contact with each other.”
The students enjoy getting to actively engage in solving real issues.
“I enjoy analyzing security alerts because each alert can be different,” said Ciara Laird, a junior management information systems and business cybersecurity double major. “I like the problem-solving aspect of determining whether the activity is benign or something that needs escalation.”
Not Just a Student Job
The students in the program have found this work is not just about looking at a computer all day.
“Getting a behind-the-scenes look has been eye-opening, especially in seeing how frequently attacks occur and how much coordination and complexity go into keeping a network of this size secure,” said junior computer science major Joseph Du.
Ava Henry, also a junior computer science major, agrees. “I didn’t realize how much work and coordination go into protecting cybersecurity. Being behind the scenes has shown me how complex and ever-expanding the field really is, as well as how involved students can be in meaningful, real-world situations.”
And cybersecurity isn’t just for computer science majors. Anderson believes that any student gets important takeaways from working in the program.
“We have computer science majors, of course, but we also have business majors,” he said. “All majors are welcome if you want to explore a career in IT. We encourage different perspectives.”
The program is open to freshmen up to juniors since there is in-depth training that the students do before they can assess even the first issue.
“TekStream takes each student through a six-week training program where they get to shadow with TekStream analysts and then TekStream analysts reverse shadow them,” Anderson added. “They then become a Tier I SOC Security Analyst.”
The students receive expert guidance from TekStream staff and training on networking and information security concepts. And they use advanced tools such as Splunk Enterprise Security and Splunk Security Orchestration, Automation and Response, or SOAR.
“One of my favorite parts of each shift is getting to investigate incidents. I grew up playing strategy games, so the problem-solving aspect really excites me,” said Henry. “Every shift feels a little different, which keeps it interesting. It’s especially rewarding because I’m constantly learning something new and building on what I already know.”
Du added, “I really enjoy the investigative nature of my role. Gathering small cyber-clues and piecing it all together to form a complete story is very rewarding and knowing I’m helping to keep UA’s network safe and secure gives real meaning to my work!”
Securing a Future
This hands-on training not only prepares students for immediate responsibilities in the SOC but also lays the groundwork for their long-term professional growth in cybersecurity.
TekStream offers career-building opportunities for students who successfully complete the program. Their framework empowers students to work side-by-side with industry experts.
The skills they use daily not only serve UA and its security needs. They also serve the students for life beyond the SOC.
“Getting hands-on experience is incredibly important, especially in a technical field,” said Henry. “Applying what you learn in class or online is completely different when you’re actually behind the keyboard, working through real situations, and gaining experience that truly prepares you for the future.”
Laird agrees, “This is not a passive or observational role. We are trusted with meaningful responsibilities and exposed to real-world security incidents that have a tangible impact.”
