Apply now »

Security Operations Engineer

About Providence

Providence, one of the US’s largest not-for-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, ‘Health for a better world’, Providence and its 121,000 caregivers strive to provide everyone access to affordable quality care and services.

Providence has a network of 51 hospitals, 1,000+ care clinics, senior services, supportive housing, and other health and educational services in the US.

Providence India is bringing to fruition the transformational shift of the healthcare ecosystem to Health 2.0. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation of health systems for improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.


Why Us?

  • Best In-class Benefits
  • Inclusive Leadership
  • Reimagining Healthcare
  • Competitive Pay
  • Supportive Reporting Relation

Role Summary

The SOC Analyst (L1) is responsible for monitoring, detecting, triaging, and escalating security events generated from enterprise security tools. The role provides hands-on exposure to security operations, incident investigation, threat monitoring, phishing analysis, and cybersecurity defense activities in a 24x7 Security Operations Center environment.

Key Responsibilities

Security Monitoring & Alert Management

  • Hands-on experience with Crowdstrike NG-SIEM, Proofpoint and CrowdStrike Query Language (CQL)
  • Monitor security alerts generated from SIEM, EDR, Email Security, and Network Security platforms.
  • Perform initial triage and analysis of security events.
  • Identify false positives and escalate genuine security incidents.
  • Follow SOC runbooks and standard operating procedures.

Incident Handling

  • Investigate suspicious activities, malware alerts, phishing attempts, and account compromise events.
  • Document findings, actions taken, and incident details.
  • Assist senior analysts during incident response activities.

Threat Analysis

  • Review indicators of compromise (IOCs).
  • Correlate security events from multiple data sources.
  • Support threat intelligence enrichment activities.

Reporting & Documentation

  • Maintain accurate shift handover notes.
  • Update incident tickets within SLA requirements.
  • Create investigation summaries and operational reports.

Required Skills

  • Hands-on experience with CrowdStrike NG-SIEM, Proofpoint, and CrowdStrike Query Language (CQL) 
  • Knowledge of Networking fundamentals (TCP/IP, DNS, HTTP, HTTPS).
  • Understanding of Windows and Linux operating systems.
  • Familiarity with security concepts such as malware, phishing, ransomware, and vulnerabilities.
  • Good analytical and problem-solving skills.
  • Strong written and verbal communication skills.

Educational Qualification

  • B.Tech / BE / BCA / MCA / BSc (Computer Science, IT, Cybersecurity)
  • Cybersecurity certifications preferred:
    • Security+
    • SC-900
    •  

Key Success Metrics

  • Alert triage accuracy
  • SLA adherence
  • Incident documentation quality
  • Continuous learning and certification progress

Providence’s vision to create ‘Health for a Better World’ aids us to provide a fair and equitable workplace for all in our employment, whether temporary, part-time or full time, and to promote individuality and diversity of thought and background, and acknowledge its role in the organization’s success. This makes us committed towards equal employment opportunities, regardless of race, religion or belief, color, ancestry, disability, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law. In furtherance to our mission in building a more inclusive and equitable environment, we shall, from time to time, undertake programs to assist, uplift and empower underrepresented groups including but not limited to Women, PWD (Persons with Disabilities), LGTBQ+ (Lesbian, Gay, Transgender, Bisexual or Queer), Veterans and others. We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.

Contact our Integrity hotline also, read our Code of Conduct.

Apply now »