Job Summary

Information Security Engineer / Cybersecurity Analyst (Healthcare IT)

Location: Noida

Experience: Minimum 2 years in cybersecurity / infrastructure security, healthcare or SaaS setting preferred

Role Purpose

Own day-to-day security monitoring, incident response coordination, and hardening of TrioTrees HISTree deployments across client-hosted and cloud environments. Act as the internal owner and single point of accountability for security coordinating with the existing third-party security vendor rather than depending on them for first response.

Key Responsibilities

- Monitor server, network, and application logs (Windows Event Logs, SQL Server logs, Terminal Services, firewall/AV) across HISTree production environments for anomalous activity
- Own patch management and vulnerability remediation cadence across Windows Server, SQL Server, and RDP-exposed infrastructure
- Act as first responder for security incidents initial triage, containment, and evidence preservation before/alongside third-party vendor engagement
- Maintain and test incident response runbooks, backup integrity checks, and ransomware-specific containment procedures
- Manage RDP/remote-access hardening, MFA enforcement, privileged account reviews, and firewall rule audits across client server environments
- Coordinate with the external security vendor: define SLAs, review their findings, validate remediation, and escalate internally
- Support RCA/CAPA documentation for security-related incidents in coordination with delivery and client-facing teams




- Conduct periodic internal security audits and readiness checks ahead of client compliance reviews (ISO 27001, HIPAA-aligned controls as applicable)
- Maintain asset inventory and access control matrix across hosted client environments

Required Skills

- 2+ years hands-on experience in security operations, systems administration with a security focus, or a SOC/vendor-side security role
- Working knowledge of Windows Server hardening, SQL Server security, RDP/remote access controls, and network log analysis
- Familiarity with ransomware attack patterns, common exploitation vectors (exposed RDP, weak credentials, unpatched systems), and containment procedures
- Understanding of backup/recovery validation and business continuity basics
- Exposure to healthcare data compliance (HIPAA, or regional equivalents like Bahrain/Oman data protection norms) is a plus given multi-country hospital deployments
- Ability to read and interpret raw logs (Windows Event Viewer, ERRORLOG, IIS/firewall logs) without over-relying on tooling dashboards
- Good to Have Security certifications (CompTIA Security+, CEH, or equivalent) not mandatory at this experience level
- Prior experience working alongside an external MSSP/vendor
- Scripting ability (PowerShell/Python) for log parsing and automation

Key Skill

- PL/SQL

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Information Security Engineer / Cybersecurity Analyst (Noida)
🏢 TrioTree Technologies
📍 Noida