Rolex Security Operations Center Detection Automation Intern
- Location
- GenevaGenevaSwitzerland
- Employment
- Internship
- Seniority
- Intern
- Department
- IT & Technology Systems
- Industry
- Fine Watches & Horology
- Posted
- Sep 4, 2026
About Rolex
Rolex is a benchmark of Swiss watchmaking excellence, renowned for precision, enduring design and uncompromising craftsmanship. As an employer, the Maison offers a culture shaped by mastery, discretion and long-term commitment, where engineers, artisans, designers and corporate specialists contribute to products built to transcend generations. Its Geneva-based heritage is matched by a global outlook, rigorous standards and significant investment in training, innovation and responsible excellence. Employees join an institution that values technical depth, collaborative discipline and meticulous attention to detail, offering the opportunity to advance within one of the world’s most respected luxury brands.
Rolex internship in Geneva: Security Operations Center Detection Automation specialist role in Information Systems division.
Role & Responsibilities
- Gather SOC analyst requirements regarding the lifecycle and quality of security detections
- Design and implement a Detection-as-Code pipeline for automated versioning, validation, testing, and deployment of detection rules and documentation
- Develop or configure tools necessary for integration with the SIEM, ticketing system, and knowledge management platforms
- Define standardized templates and quality standards for detection rule authoring, review, and documentation
- Structure and migrate initial use cases, then participate in operational validation and regression testing
- Document the solution architecture and facilitate knowledge transfer to relevant stakeholder teams
Qualifications
- Currently enrolled in a Master's degree programme in Cybersecurity, Information Technology, or equivalent
- Demonstrated proficiency in software development, ideally with Python, Bash, PowerShell, or similar languages
- Knowledge of software development practices including Git, version control, code review, testing, and continuous integration
- Understanding of SIEM concepts, detection rule frameworks, and incident management; familiarity with Sigma, detection rule formats, or security tool APIs is advantageous
- Rigorous attention to detail, intellectual curiosity, adaptability, and ability to collaborate across multidisciplinary teams
Skills
Experience
Currently pursuing advanced studies in cybersecurity or information technology with foundational knowledge of software development and security operations practices.
Education
Master's degree programme (or equivalent) in Cybersecurity, Information Technology, Computer Science, or related discipline.
Workplace
This position is based in Geneva, Geneva, Switzerland.
Culture
Rolex fosters a workplace culture defined by precision, excellence, and a deep respect for craftsmanship. As an employer, the company offers a disciplined yet collaborative environment where long-term thinking, continuous improvement, and attention to detail guide every aspect of work.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Rolex, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «SOC Detection Engineer Intern», «Detection as Code Specialist Intern», «Cybersecurity Detection Automation Intern», «SOC Automation Intern», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.