Engineers Clinic
IntermediateSecurity trackZA-CP-40

Cybersecurity Incident Response Playbook & SIEM Lab

Internship role: SOC Analyst Intern. Build a lab SIEM, simulate three attack scenarios, write detection rules and an incident-response playbook aligned to the Cybercrimes Act reporting duties.

10 Guided Steps240h Internship TierSubmit: GitHub repo or evidence pack + live demo / report + README + milestone logbookVerified CertificateAI Rubric Graded
Program Overview

Internship role: SOC Analyst Intern. Build a lab SIEM, simulate three attack scenarios, write detection rules and an incident-response playbook aligned to the Cybercrimes Act reporting duties.

What you submit

GitHub repo or evidence pack + live demo / report + README + milestone logbook

Stack: Wazuh or Elastic SIEM, lab VMs, MITRE ATT&CK

How it is graded

Signals: Milestone gates met; measurable result reported; documentation; deployment or evidence reachable; reflective log

  • Functionality & requirements30
  • Technical quality & architecture25
  • Documentation15
  • Deployment & evidence15
  • Innovation10
  • Presentation5

Pass 60% · Merit 75% · Distinction 90%

Learning Outcomes
240-hour South Africa programme. South Africa is among the most-targeted countries in Africa and SOC hiring is strong.
Target Audience

Engineering Students

Diploma, B.Tech, B.E., BCA, MCA, or M.Tech students seeking practical experience.

Aspiring Developers

Developers who want to build proof-of-work capstone projects for tech resumes.

Job Seekers

Graduates looking for AI-evaluated code review & verified industry credentials.