Lyric is the trusted leader in healthcare decision intelligence. Built on more than 35 years of proven results, Lyric combines responsible AI with clinical, payment, regulatory, and policy expertise to deliver transparent, auditable insights in milliseconds across real-time claims workflows. Lyric augments human decision-making so health plans can make faster, more accurate payments while maintaining full control. Today, Lyric supports 200 million lives, with nine of the top 10 U.S. health plans relying on its platform to reduce waste, improve efficiency, and support accurate payments.
Applicants must already be legally authorized to work in the U.S. Visa sponsorship/sponsorship assumption and other immigration support are not available for this position.
The Information Security Intern will support Lyric’s Security team in protecting company systems, intellectual property, and customer data across cloud environments, corporate infrastructure, and endpoints.
This 12-week internship is designed for a student who has completed their third year of an Information Security, Cybersecurity, Computer Science, or related university program and is looking to apply their academic knowledge in a real-world technology environment.
Working alongside experienced security professionals, the intern will gain hands-on exposure to areas including cloud security, identity and access management (IAM), endpoint security, security monitoring and incident response, vulnerability management, data protection, and security automation.
The intern will contribute to meaningful projects while developing a practical understanding of how an enterprise security organization operates within an AI-forward healthcare technology company.
Prior professional information security experience is not required.
Essential Job Responsibilities
Support the Security team in monitoring and maintaining security controls across AWS, Microsoft Azure, corporate networks, and endpoints
Assist with security information and event management (SIEM) activities, including reviewing security events, analyzing logs, documenting findings, and learning how security detections are developed and tuned
Gain exposure to endpoint detection and response (EDR) technologies and assist with endpoint security monitoring, policy reviews, and security investigations
Support identity and access management (IAM) activities involving concepts such as single sign-on (SSO), multi-factor authentication (MFA), role-based access, privileged access, and identity lifecycle management
Assist Security team members with reviewing and investigating potential security alerts and documenting findings and recommended next steps
Participate in the vulnerability management lifecycle, including reviewing vulnerability scan results, understanding risk prioritization, tracking remediation activities, and working with technology teams
Assist with documenting security standards, procedures, technical controls, and response runbooks
Learn how security configuration standards and frameworks are applied to cloud infrastructure, operating systems, networks, and applications
Participate in security projects involving areas such as cloud security, data protection, threat detection, security automation, and vulnerability management
Research emerging cybersecurity threats, technologies, and security practices and share findings with the Security team
Develop an understanding of security considerations unique to healthcare technology and regulated environments
Complete a defined internship project that addresses a real security opportunity or challenge and present findings and recommendations to Security and Technology leadership at the conclusion of the internship
Required Qualifications
Currently pursuing a Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Systems, Computer Engineering, or a closely related technical field
Expected to have completed the third year of undergraduate study prior to the start of the internship
Academic coursework or demonstrated foundational knowledge in information security or cybersecurity
Foundational understanding of computer networks, operating systems, applications, and general information technology concepts
Familiarity through coursework, labs, projects, or independent learning with fundamental cybersecurity concepts such as:Authentication and access controlNetwork securityVulnerability managementSecurity monitoringCloud securityData protectionCommon cybersecurity threats and attack methods
Strong analytical and problem-solving skills with an interest in investigating technical problems
Ability to communicate technical concepts clearly and document work effectively
Demonstrated curiosity and interest in cybersecurity, emerging technologies, and continuous learning
Ability to collaborate effectively in a team environment
No prior professional cybersecurity or information security work experience required
Preferred Qualifications
Coursework, university labs, projects, competitions, or independent learning involving cybersecurity, cloud computing, networking, operating systems, or secure software development
Exposure through coursework or personal projects to AWS, Microsoft Azure, or other cloud platforms
Familiarity with basic cybersecurity concepts and tools related to SIEM, EDR, IAM, vulnerability scanning, or network security
Introductory experience with a scripting or programming language such as Python, PowerShell, JavaScript, Java, or C#
Familiarity with Linux and/or Windows operating systems and basic command-line tools
Exposure to security frameworks or concepts such as the NIST Cybersecurity Framework, CIS Controls/Benchmarks, or MITRE ATT&CK
Participation in cybersecurity clubs, Capture the Flag (CTF) competitions, hackathons, university research, cyber ranges, or other technical extracurricular activities
Completion or pursuit of an entry-level security or cloud certification such as CompTIA Security+, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals, or similar certification
Interest in cloud security, security engineering, threat detection, incident response, vulnerability management, identity security, or security automation
Interest in learning how cybersecurity operates within healthcare technology or other highly regulated environments
What the Intern Will Gain
During the internship, the Information Security Intern will have the opportunity to:
Apply university coursework to real enterprise cybersecurity challenges
Work directly with experienced security and technology professionals
Gain exposure to security technologies used across AWS, Azure, endpoints, identity platforms, and enterprise infrastructure
Understand how a mature security organization identifies, evaluates, and responds to cybersecurity risk
Develop practical experience investigating security events and vulnerabilities
Learn how security teams partner with Engineering, Infrastructure, Product, and other business functions
Build a portfolio-worthy security project with measurable business or technical impact
Present their work and recommendations to Lyric leaders at the conclusion of the internship
***The US base salary range for this full-time position is:
The specific salary offered to a candidate may be influenced by a variety of factors including but not limited to the candidate’s relevant experience, education, and work location. Please note that the compensation details listed in US role postings reflect the base salary only, and does not reflect the value of the total rewards compensation. ***
Equal opportunity and legal
Lyric is an Equal Opportunity Employer that strives to create an inclusive environment, empower employees and embrace collaborative success.
