Summary
Remote - US
Full time
JR934
Lyric is the trusted leader in healthcare decision intelligence. Built on more than 35 years of proven results, Lyric combines responsible AI with clinical, payment, regulatory, and policy expertise to deliver transparent, auditable insights in milliseconds across real-time claims workflows. Lyric augments human decision-making so health plans can make faster, more accurate payments while maintaining full control. Today, Lyric supports 200 million lives, with nine of the top 10 U.S. health plans relying on its platform to reduce waste, improve efficiency, and support accurate payments.
Applicants must already be legally authorized to work in the U.S. Visa sponsorship/sponsorship assumption and other immigration support are not available for this position.
The Information Security Intern will support Lyric's Security team in protecting company systems, intellectual property, and customer data across cloud environments, corporate infrastructure, and endpoints.
This 12-week internship is designed for a student who has completed their third year of an Information Security, Cybersecurity, Computer Science, or related university program and is looking to apply their academic knowledge in a real-world technology environment.
Working alongside experienced security professionals, the intern will gain hands-on exposure to areas including cloud security, identity and access management (IAM), endpoint security, security monitoring and incident response, vulnerability management, data protection, and security automation.
The intern will contribute to meaningful projects while developing a practical understanding of how an enterprise security organization operates within an AI-forward healthcare technology company.
Prior professional information security experience is not required.
Essential Job Responsibilities
+ Support the Security team in monitoring and maintaining security controls across AWS, Microsoft Azure, corporate networks, and endpoints
+ Assist with security information and event management (SIEM) activities, including reviewing security events, analyzing logs, documenting findings, and learning how security detections are developed and tuned
+ Gain exposure to endpoint detection and response (EDR) technologies and assist with endpoint security monitoring, policy reviews, and security investigations
+ Support identity and access management (IAM) activities involving concepts such as single sign-on (SSO), multi-factor authentication (MFA), role-based access, privileged access, and identity lifecycle management
+ Assist Security team members with reviewing and investigating potential security alerts and documenting findings and recommended next steps
+ Participate in the vulnerability management lifecycle, including reviewing vulnerability scan results, understanding risk prioritization, tracking remediation activities, and working with technology teams
+ Assist with documenting security standards, procedures, technical controls, and response runbooks
+ Learn how security configuration standards and frameworks are applied to cloud infrastructure, operating systems, networks, and applications
+ Participate in security projects involving areas such as cloud security, data protection, threat detection, security automation, and vulnerability management
+ Research emerging cybersecurity threats, technologies, and security practices and share findings with the Security team
+ Develop an understanding of security considerations unique to healthcare technology and regulated environments
+ Complete a defined internship project that addresses a real security opportunity or challenge and present findings and recommendations to Security and Technology leadership at the conclusion of the internship
Required Qualifications
+ Currently pursuing a Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Computer Engineering, or a closely related technical field
+ Expected to have completed the third year of undergraduate study prior to the start of the internship
+ Academic coursework or demonstrated foundational knowledge in information security or cybersecurity
+ Foundational understanding of computer networks, operating systems, applications, and general information technology concepts
+ Familiarity through coursework, labs, projects, or independent learning with fundamental cybersecurity concepts such as:Authentication and access controlNetwork securityVulnerability managementSecurity monitoringCloud securityData protectionCommon cybersecurity threats and attack methods
+ Strong analytical and problem-solving skills with an interest in investigating technical problems
+ Ability to communicate technical concepts clearly and document work effectively
+ Demonstrated curiosity and interest in cybersecurity, emerging technologies, and continuous learning
+ Ability to collaborate effectively in a team environment
+ No prior professional cybersecurity or information security work experience required
Preferred Qualifications
+ Coursework, university labs, projects, competitions, or independent learning involving cybersecurity, cloud computing, networking, operating systems, or secure software development
+ Exposure through coursework or personal projects to AWS, Microsoft Azure, or other cloud platforms
+ Familiarity with basic cybersecurity concepts and tools related to SIEM, EDR, IAM, vulnerability scanning, or network security
+ Introductory experience with a scripting or programming language such as Python, PowerShell, JavaScript, Java, or C#
+ Familiarity with Linux and/or Windows operating systems and basic command-line tools
+ Exposure to security frameworks or concepts such as the NIST Cybersecurity Framework, CIS Controls/Benchmarks, or MITRE ATT&CK
+ Participation in cybersecurity clubs, Capture the Flag (CTF) competitions, hackathons, university research, cyber ranges, or other technical extracurricular activities
+ Completion or pursuit of an entry-level security or cloud certification such as CompTIA Security+, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals, or similar certification
+ Interest in cloud security, security engineering, threat detection, incident response, vulnerability management, identity security, or security automation
+ Interest in learning how cybersecurity operates within healthcare technology or other highly regulated environments
What the Intern Will Gain
During the internship, the Information Security Intern will have the opportunity to:
+ Apply university coursework to real enterprise cybersecurity challenges
+ Work directly with experienced security and technology professionals
+ Gain exposure to security technologies used across AWS, Azure, endpoints, identity platforms, and enterprise infrastructure
+ Understand how a mature security organization identifies, evaluates, and responds to cybersecurity risk
+ Develop practical experience investigating security events and vulnerabilities
+ Learn how security teams partner with Engineering, Infrastructure, Product, and...