{"id":220842,"date":"2026-05-26T11:18:00","date_gmt":"2026-05-26T15:18:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/26\/from-intern-to-analyst-ncites-hafso-ibrahim-brings-cybersecurity-training-to-nelnet-national-counterterrorism-innovation-technology-and-education-center-ncite\/"},"modified":"2026-05-27T05:05:34","modified_gmt":"2026-05-27T09:05:34","slug":"from-intern-to-analyst-ncites-hafso-ibrahim-brings-cybersecurity-training-to-nelnet-national-counterterrorism-innovation-technology-and-education-center-ncite","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/26\/from-intern-to-analyst-ncites-hafso-ibrahim-brings-cybersecurity-training-to-nelnet-national-counterterrorism-innovation-technology-and-education-center-ncite\/","title":{"rendered":"From Intern to Analyst: NCITE’s Hafso Ibrahim Brings Cybersecurity Training to Nelnet | National Counterterrorism Innovation, Technology, and Education Center (NCITE)"},"content":{"rendered":"

From Intern to Analyst: NCITE’s Hafso Ibrahim Brings Cybersecurity Training to Nelnet | National Counterterrorism Innovation, Technology, and Education Center (NCITE)<\/a><\/p>\n

https:\/\/www.unomaha.edu\/ncite\/news\/2026\/05\/nelnet-internship-feature.php<\/a><\/p>\n

Publish Date: 2026-05-26 11:18:00<\/a><\/p>\n

Source Domain: www.unomaha.edu<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points.
\n While plowing through your inbox, you open a short, vague email from a \u201ccoworker\u201d with a link asking you to renew an expired software subscription.
\nSavvy technology user that you are, you check the sending email address, see that it\u2019s missing a letter in the domain name, and smugly report it as a phishing attempt. The email disappears and you pat yourself on the back for a job well done.
\n\u201cYeah, I would be the person that goes through that process and makes sure the links are not malicious,\u201d said NCITE\u2019s Hafso Ibrahim, who graduated from UNO in May with her bachelor\u2019s degree in cybersecurity from the College of Information Science & Technology.
\nSoft-spoken but self-assured, Ibrahim can usually be found at her desk, headset in tow, keenly scanning her screen while briefing virtually with colleagues. With cybersecurity internships at the University and Nelnet and exposure to NCITE research, her senior year went far beyond evaluating suspicious emails \u2013 it prepared her to be Nelnet\u2019s next cyber threat intelligence analyst.
\nBorn in Somalia, Ibrahim grew up in Kenya, learning to speak Somali, Amharic, and Swahili before moving with her family to Omaha when she was 10. After taking a computer science course at Omaha\u2019s Burke High School, Ibrahim was intrigued by a career in IT and started doing research.
\n\u201cI didn’t want to, like, be stuck doing the same thing over and over again,\u201d she said. \u201cI don\u2019t feel like coding for the rest of my life.\u201d
\nThe dynamic nature of cybersecurity was appealing.
\n\u201cYou have to learn how attackers are using new tools that are coming out, how they’re changing up their tactics,\u201d Ibrahim said. \u201cThey get very creative at moving around security controls so they don’t get caught.\u201d
\nLearning the Cyber Threat Landscape
\nAfter choosing UNO and making the decision to graduate in three years, she was eager to develop skills useful for the workforce. In August, she began an internship with the Nebraska University System\u2019s Information Technology Services Omaha-based Security Operations Center (SOC), working within a team of students and professionals to detect and mitigate incoming cyber threats to University infrastructure.
\nIn October, through the SOC\u2019s close relationship with NCITE, Ibrahim was selected to be a trial intern for a workforce development initiative between NCITE and Nelnet, the financial services and education technology company headquartered in Lincoln, NE.
\n\u201cThis partnership is unique because Hafso was completing her work in the NCITE offices to learn about our research and how it applies to threat mitigation in the cybersecurity domains,\u201d said Matt Allen, Ph.D., NCITE director of operations and research services.
\n\u201cIt\u2019s been a tremendously fruitful experience,\u201d Timothy Batts, Nelnet cybersecurity manager and Ibrahim\u2019s supervisor, said. \u201cThe partnership gives us research depth and external perspective we couldn’t easily replicate in-house.\u201d
\nAfter the United Healthcare CEO assassination in 2024, Nelnet accelerated a cyber protection initiative following a spike in threats to their own executives. Ibrahim was tasked with monitoring such threats flagged in conversations on the dark web and social media.
\nThe team evaluated nearly a hundred social media posts of concern calling for targeted cyber and\/or physical attacks on the organization amidst the ongoing Iran conflict and the Canvas LMS breach in late April.
\n\u201cThis isn’t reactive anymore,\u201d Batts said. \u201cWe treat geopolitical and industry-wide events as predictable triggers for threat activity, and our executive protection and CTI capabilities are built to scale with them.\u201d<\/p>\n

It\u2019s been a tremendously fruitful experience. The partnership gives us research depth and external perspective we couldn’t easily replicate in-house.<\/p>\n

Entering the Cyber Workforce
\nOne of the most important cybersecurity methods Ibrahim learned \u2013 and where NCITE research provided distinct value \u2013 was threat hunting. Threat hunting is the practice of identifying the latest threat indicators (signatures of different attackers) and proactively searching security log annals for traces of them.
\nTo help develop such indicators, Ibrahim would regularly sync with NCITE research teams to build actor profiles.
\n\u201cYou have to find out what techniques they use and what an attack by that threat actor group would look like in our environment,\u201d she said.
\nAs a student, Ibrahim executed hunts. In her new role as a CTI analyst, she\u2019ll shift to the other end of this workflow, researching adversaries, identifying indicators, and turning her findings into actionable intelligence for response teams.
\nAllen believes the partnership serves as a model for university\u2013industry collaborations. \u201cPart of UNO\u2019s metropolitan mission is to provide real-world experiences to students and in support of local industry,\u201d he said. \u201cI think this program is a great example of how we can serve that mission.\u201d
\nIbrahim is grateful for her time in the University SOC, which allowed her to build threat detection skills and reinforced the lesson that cyber criminals tend to be opportunistic rather than targeting a specific sector. \u201cA lot of times, it would be the same thing being briefed at Nelnet as well as in the SOC,\u201d she said.
\nIbrahim is Batts\u2019 first intern hire as a manager, and he\u2019s thrilled to have someone so dependable on his team. \u201c[Hafso] isn’t just executing tasks \u2013 she’s contributing to how we think about threat intelligence at Nelnet,\u201d he said. \u201cShe takes ownership in a way that’s rare at any career stage.\u201d
\nJenn Disney, manager of the University\u2019s Omaha SOC office, agreed. \u201cShe has a good head on her shoulders and will go far.\u201d<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

From Intern to Analyst: NCITE’s Hafso Ibrahim Brings Cybersecurity Training to Nelnet | National Counterterrorism…<\/p>\n","protected":false},"author":1,"featured_media":220843,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.unomaha.edu\/ncite\/news\/2026\/05\/img\/cascade-crop.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[30,24,25,34],"class_list":["post-220842","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-breach","tag-cybersecurity","tag-phishing","tag-threat-actor"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/220842"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=220842"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/220842\/revisions"}],"predecessor-version":[{"id":220844,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/220842\/revisions\/220844"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/220843"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=220842"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=220842"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=220842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}