Threat Detection & Response Engineer Intern

Role overview

CarGurus is looking for a Threat Detection and Response Intern to work with our Threat Detection and Response (TD&R) Team . This is a hands-on technical role that will build our first line of defense against cybersecurity threats in a complex and evolving landscape. You will be responsible for our detection and response lifecycle, identifying and preventing threats from impacting our employees, customers and other stakeholders. As a Threat Detection and Response Intern, you will have the opportunity to build a platform to identify and stop threats, work with data to solve complex security challenges, and serve as the first line of defense for the CarGurus ecosystem.

As a Threat Detection and Response Intern, you will join an 11-week Summer Internship Program designed to give you hands-on experience, expand your professional network, and build core industry skills. This full-time opportunity (40 hours per week) runs from June through August 2027. CarGurus operates on a hybrid working model, and candidates should expect to work out of our Boston, MA office 60% of the time (approximately three days per week).

What you'll do

• Build tools and techniques to detect threats to the company using an engineering-first approach that prioritizes reliability, maintainability and scalability

• Leverage AI and automation to streamline detection and response operations in a safe and reliable manner

• Onboard, normalize and optimize security logging data to support detection engineering, applied ML models, and efficient querying during incidents.

• Develop high-fidelity, rule-based and ML-driven detections as code, utilizing automated testing and CI/CD pipelines for deployment.

• Monitor the threat landscape to identify and track emerging threats, ensuring that appropriate detective and preventative controls are deployed

• Partner with development teams to design controls for a cloud first infrastructure (AWS, Kubernetes, etc)

What you'll bring

• Currently pursuing a Bachelor’s degree in Cybersecurity, Computer Science or a related field, with eligibility to complete a full-time internship.

• Strong desire to apply the latest technology including AI and ML to defend against threats

• Desire to learn more about data pipelines and data engineering, especially centralized logging, SIEM tools, and data lakes

• Desire to measure the success of your work with quantitative tools like Precision and Recall

• Experience in at least one programming language like Python, Go or similar

• Desire to learn more about cloud infrastructure and technologies like AWS, Kubernetes, containers, IaC, etc

• Familiarity with tactics, techniques, and procedures used by threat actors

• Strong passion for continuous learning, especially relating to cybersecurity and technology

• Team player with strong oral and written communication skills