How intern Siebe applied his AI skills in spotit's SOC
From data to detection
An internship is the perfect bridge between theory and practice. For Siebe Van Der Donck—an Applied Computer Science student specializing in AI & Data Engineering at HOGENT—his time at the Security Operations Center (SOC) of spotit was an unexpected but incredibly enriching dive into the world of cybersecurity.
“I initially thought this was outside my field of study. But when I read the assignment, I immediately knew: this is what I want to do.”
From AI to SOC: an unexpected match
Siebe discovered spotit’s internship opportunity via the HOGENT portal, and his interest was sparked right away.
“The title said it all: automating data leak detection. Even though I had little prior knowledge of cybersecurity, I was familiar with the technologies involved—so I applied immediately.”
After a first conversation with recruiter Yoica and a technical deep dive with David from the SOC team, it was clear: this was a perfect fit.
A smooth landing in a high-tech environment
The first week in a SOC can be overwhelming: new jargon, tools, and workflows.
“I came from an AI background and suddenly I was hearing about SOC, NOC, CSIRT… Luckily, I received great guidance and had time to get familiar with everything. Within a few days, it already felt natural.”
Joining team meetings, collaborating with colleagues, managing a real-world assignment—these quickly became part of his daily routine.
“David and Arnout were always available to give feedback or explain things. I was encouraged to make mistakes and learn from them. That gave me a lot of confidence.”
A hands-on assignment with real impact
During his internship, Siebe developed a tool to automatically detect data leaks on the internet and dark web—such as exposed email addresses or passwords.
“This data is then automatically converted into an incident ticket, so SOC analysts can act on it immediately. That saves time and helps us respond faster.”
“The best part? My tool was well received and will actually be used within spotit. I created something that truly makes a difference. That’s very rewarding.”
Deep learning: from phishing to CSIRT response
The internship didn’t just challenge Siebe technically—it gave him valuable insight into how cybersecurity works in practice.
“I saw how incidents are detected, monitored, and resolved. I also got to observe how the CSIRT team responds to large-scale attacks. You learn about this in theory at school, but it’s only on the job that you realize what’s really involved.”
He also grew his soft skills:
“I learned how to prepare and participate in meetings, ask for help, manage my own deadlines, and work efficiently from home. I’ll take all of that with me.”
“An internship really is the best way to learn through experience. To learn in the field. And at spotit, I was able to do exactly that.”
A team you won’t forget
What stood out to Siebe most? The atmosphere.
“Everyone knows each other. It’s professional, but also very welcoming. The Friday ‘weekend o’ clocks’ are a fun touch.” And the work culture?
“You’re trusted to work independently, but there’s always someone ready to support you.”
Step outside your comfort zone
Siebe has a clear message for students who may hesitate:
“Cybersecurity can sound intimidating—especially if it’s outside your field. But take the leap. I’m really glad I did. It’s one of the most valuable learning experiences I’ve ever had.”
What’s next for him?
“I’ve already signed up for the Spotit Academy starting in September. This internship broadened my perspective. I now see how versatile cybersecurity is, and how I can contribute with my own background.”