About the Role:

Join our security operations team and learn the day-to-day work of a SOC on a live environment. A working security engineer will review your work and teach you how we investigate and decide.

What You'll Do:

- Monitor and triage alerts in our SIEM (Wazuh): separate false positives from real threats and write up what you found.

- Investigate web attacks, scans and brute-force attempts using nginx, authentication and system logs, and enrich IPs, domains and file hashes with threat-intelligence tools.

- Review vulnerability scan results across Linux servers, help prioritise fixes, track patching of newly published critical advisories and verify the fixes.

- Tune detection rules and decoders, test them, and cut down alert noise.

- Support file integrity monitoring, configuration checks against CIS benchmarks, and onboarding of new servers into monitoring.

- Build and maintain security dashboards and weekly reports for the team.

- Write short runbooks and incident write-ups.

- Automate repetitive checks with Python or Bash, and help test AI-assisted alert triage.

Tools and Topics:

Wazuh and OpenSearch dashboards, Linux (Debian/Ubuntu), Docker, cloud security basics (GCP), CI/CD tooling, MITRE ATT&CK;, CVE/NVD,



web server logs, OWASP Top 10.

Eligibility:

- B.Tech/B.E. in Computer Science, IT, Cybersecurity or a related field (BCA/MCA also welcome).

- Graduates only. Final-year students are not eligible.

- Solid basics of networking (TCP/IP, DNS) and the Linux command line.

- Understanding of common attacks (brute force, SQL injection, malware, phishing).

- Ability to read logs and explain your findings in clear written English.

- Curiosity and care: you check before you conclude.

- Able to work from our Noida office five days a week.

Positive to Have:

- Hands-on lab work with Wazuh, Splunk, ELK or QRadar.

- TryHackMe or Hack The Box activity, CTFs or a home lab.

- Basic Python or Bash.

- Entry-level certifications or courses, such as the Google Cybersecurity Certificate, Fortinet NSE 1-2, Cisco's introductory cybersecurity courses or Microsoft SC-900.

What You'll Gain:

- Hands-on SOC experience on production systems, not a simulation.

- Mentoring from a working security engineer.

- Internship completion certificate.

- Conversion to a full-time role based on your performance.

📌 IT Security Consultant Internship (Noida)
🏢 Leading
📍 Noida