Role overview

Qualifications

Basic knowledge of Security Operations Center (SOC), cyber security, and information security.
Familiarity with Azure, EDR/XDR, SIEM tools, SOAR, firewall, IDS/IPS, MFA, encryption, and related security technologies.
Foundational networking and protocol knowledge (TCP/IP, HTTP, DNS) and awareness of common threats (DoS/DDoS, SQL injection, XSS).
Scripting ability (Bash, PowerShell, or Python) to support incident response across Windows, Linux, and macOS, plus strong oral and written communication skills.

Responsibilities

Triage security incidents identified by SOC analysts and coordinate initial remediation.
Identify rule and tool enhancements to automate reporting and reduce false positives in unified SIEM; review with manager for implementation.
Monitor threat intelligence and vendor alerts; escalate security issues to other business units as needed.
Assist with creation and maintenance of incident response procedures, dashboards, and tool implementation; participate in SOC research.

Key facts

Remote from: India
Internships
Entry-level / graduate
English

Other skills

Microsoft Windows
Verbal Communication Skills
Collaboration
Prioritization
Research
Analytical Skills

About the company

MEDHOST

MEDHOST is a provider of market-leading enterprise, departmental and healthcare engagement solutions to healthcare facilities nationwide. Our integrated product portfolio includes intuitive, cloud-based solutions, including YourCareEverywhere, a robust health and wellness consumer engagement platform. Our broad offering of hosting, outsourcing, marketing and consulting services are changing how clinicians and hospital leaders work and collaborate, while generating notable operational improvements. MEDHOST delivers value by enabling hospitals of all types and all sizes to better manage the business of healthcare across the care continuum while meeting evolving regulatory requirements.

Company details

Company size501 - 1000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Profile: IT Cyber Defense Analyst-Intern
Location: Pune (Hybrid)
Shift: Rotational (24/7)

Required skills:
• Basic knowledge of Security Operation Center (SOC), Cyber Security, and Information Security.
• Basic knowledge about Azure, EDR, XDR, SOAR, SIEM Tools, Firewall, IDS/IPS, multi-factor authentication, encryption etc.
• Basics understandings about TCP/IP, HTTP, FTP, SMTP, DNS.
• Familiarity with network and application threats such as DoS/DDoS, SQL injection, XSS, reconnaissance scanning, and methods to avoid detection.
• Good to be familiar with the MITRE ATT&CK Framework and/or Cyber Kill Chain.
• Have scripting knowledge with Bash, PowerShell, or Python and the ability to use these skills to aid in responding to incidents involving Windows, Linux, and Mac hosts.
• Have strong oral and written communication skills.

Responsibilities:

1. Triage security incidents identified by SOC analysts.
2. Identify enhancement to rule sets and other tool optimization to automate reporting and reduce false positives in unified SIEM and review with manager / senior team members for implementation.
3. Coordinate with SOC manager to escalate security issues to other business units including solutions development, customer hosting and corporate IT.
4. Collaborate with business units to prioritize vulnerability remediation and execution of planned activities.
5. Subscribe to threat intelligence services and monitor vendor alerts for major vulnerability disclosures.
6. Monitoring of advanced security tools, perform analysis of dissimilar indicators, correlation of multiple sources, alert & coordination of security incidents across the environment.
7. Review & analyze system logs and third-party management products to preemptively detect, take defined corrective actions and alert process/system owners to new issues.
8. Assist with creation and maintenance of security incident response procedures.
9. Participate in research and assist implementation of security tools used by SOC team.
10. Assist SOC manager with dashboards and business reporting.
11. Ready to work in rotational 24/7 shift.