Cyber Security & Infrastructure Engineer

About the role

XO Health is seeking a Cyber Security & Infrastructure Engineer to design, implement, monitor, and secure its hybrid cloud and infrastructure environments. This remote position in India combines hands‑on infrastructure administration with cybersecurity engineering across Azure, AWS, Microsoft 365, and related security platforms.

Key responsibilities

• Support the annual SOC 2 Type II audit program, including control design, evidence collection, remediation, and continuous compliance monitoring.
• Administer and optimize the Microsoft Sentinel SIEM platform, creating analytics rules, alerts, dashboards, and automation workflows.
• Investigate security incidents, coordinate containment, remediation, and recovery, and lead forensic investigations when needed.
• Monitor threats via Microsoft Defender, Sentinel, AWS security services, and third‑party tools; conduct threat hunting, vulnerability management, and security assessments.
• Design, implement, and maintain secure Microsoft Azure environments following best‑practice controls such as Entra ID, Conditional Access, and Privileged Identity Management.
• Develop and maintain security policies, procedures, risk assessments, and documentation to ensure audit readiness.
• Support penetration testing, tabletop exercises, and disaster‑recovery testing.

Required profile

• Proven experience securing hybrid cloud environments (Azure and AWS).
• Hands‑on experience with Microsoft Sentinel, Microsoft Defender, and Microsoft 365 security features.
• Familiarity with SOC 2 Type II audit processes and compliance documentation.
• Ability to lead incident response and conduct forensic investigations.
• Strong analytical skills for threat hunting, vulnerability management, and security monitoring.

Required skills

• Microsoft Azure
• Microsoft Entra ID (Conditional Access, Privileged Identity Management)
• Microsoft Sentinel (SIEM administration)
• Microsoft 365 security suite
• Microsoft Defender
• AWS security services
• Networking and endpoint security
• Security monitoring, analytics, and automation workflows
• Threat hunting and vulnerability management
• Incident response and forensic investigation
• SOC 2 Type II compliance