{"id":726013,"url":"https://alion.io/job/xohealthinc-cyber-security-infrastructure-engineer","title":"Cyber Security & Infrastructure Engineer","company":{"id":685233,"name":"XO Health","domain":"xohealthinc.com","url":"https://alion.io/company/xohealthinc","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":{"min":2000000,"max":2500000,"currency":"INR","period":"year","gross":null,"usd_annual":26545},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-17T13:51:46Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-26T09:32:37Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":69},"description":"XO Health believes healthcare is fixable. Become part of the community changing the face of the industry.\nXO Health is the first health plan designed by and for self-insured employers that delivers a more unified health experience for everyone - from those who receive care, to those who deliver it, to those who pay for it.\nWe are growing a multi-disciplinary team of diverse and digitally empowered employees ready to rebuild trust in healthcare through comprehensive and unified transformation.\nCyberSecurity & Infrastructure Engineer - India (Remote)\nAbout the Role:\nThe Cybersecurity & Infrastructure Engineer is responsible for designing, implementing, monitoring, and securing the organization's hybrid cloud and infrastructure environments. This role serves as a technical leader for cybersecurity operations, cloud security, compliance initiatives, infrastructure engineering, and incident response.\nThe position combines hands-on infrastructure administration with cybersecurity engineering responsibilities across Microsoft Azure, Microsoft Sentinel, Microsoft 365, Entra ID, AWS, networking, endpoints, and security platforms. Engineering plays a key role in maintaining compliance with SOC 2 Type II controls, improving cyber resilience, supporting audits, and advancing the organization's security maturity.\nResponsibilities:\nSOC2 Audit\nSupport organization's annual SOC 2 Type II audit program, including control design, evidence collection, remediation management, auditor coordination, and continuous compliance monitoring.\nPartner with business and technology stakeholders to ensure security, availability, confidentiality, and change management controls are effectively implemented and operating throughout the audit period.\nDrive successful completion of SOC 2 Type II examinations with minimal findings by maintaining an audit-ready environment, strengthening internal controls, and promoting a culture of security and compliance.\nDevelop and maintain policies, procedures, risk assessments, and control documentation necessary to support ongoing compliance and future audit readiness.\nCybersecurity Operations\nAdminister and optimize Microsoft Sentinel SIEM platform.\nDevelop and maintain security monitoring, analytics rules, alerting, dashboards, and automation workflows.\nInvestigate security incidents and coordinate containment, remediation, and recovery activities.\nMonitor and respond to threats identified through Microsoft Defender, Sentinel, AWS security services, and third-party platforms.\nConduct threat hunting, vulnerability management, and security assessments.\nLead incident response activities and coordinate forensic investigations as needed.\nMaintain security documentation, playbooks, and response procedures.\nSupport penetration testing, tabletop exercises, and disaster recovery testing.\nCloud Security & Architecture\nDesign and maintain secure Microsoft Azure environments.\nImplement Azure security best practices utilizing:Microsoft Entra ID\nConditional Access\nPrivileged Identity Management (PIM)\nDefender for Cloud\nAzure Security Center\nMicrosoft Purview\n\nSecure AWS cloud environments including:IAM\nCloudTrail\nGuardDuty\nSecurity Hub\nConfig\nCloudWatch\n\nImplement zero-trust security principles across cloud platforms.\nInfrastructure Engineering\nMaintain and support hybrid infrastructure environments including:Microsoft Azure\nAWS\nActive Directory\nMicrosoft Entra ID\nWindows Server\nVirtualization platforms\nMicrosoft 365\nNetwork and security appliances\n\nDesign and implement high-availability and disaster recovery solutions.\nManage identity lifecycle and privileged access controls.\nSupport cloud migrations and infrastructure modernization initiatives.\nGovernance, Risk & Compliance\nLead technical compliance activities supporting SOC 2 Type II audits.\nCollaborate with external auditors and internal stakeholders during audit engagements.\nDevelop, maintain, and document security controls and evidence repositories.\nPerform periodic access reviews, risk assessments, and control testing.\nRecommend remediation activities to address audit findings and security gaps.\nSupport regulatory and contractual security requirements.\nSecurity Automation\nDevelop automation using:PowerShell\nAzure Automation\nLogic Apps\nSentinel SOAR capabilities\n\nImprove security operations through automated detection, response, and reporting.\nCreate executive and operational cybersecurity metrics and dashboards.\nWe’re Looking for Candidates Who Have:\nEducation\nBachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field preferred.\nExperience\n3-5+ years of cybersecurity and infrastructure engineering experience.\n3+ years managing Microsoft Azure environments.\n2+ years administering Microsoft Sentinel or comparable SIEM platforms.\nExperience supporting SOC 2 Type II audits.\nExperience securing AWS cloud environments.\nExperience with incident response and vulnerability management.\nExperience with Microsoft 365 security technologies.\nTechnical Skills\nRequired\nMicrosoft Azure\nMicrosoft Sentinel\nMicrosoft Defender Suite\nMicrosoft Entra ID (Azure AD)\nActive Directory\nMicrosoft 365 Security\nAWS Security Services\nPowerShell scripting\nVulnerability Management Platforms\nIncident Response Procedures\nSecurity Monitoring and SIEM Operations\nNetwork Security Fundamentals\nFirewall Administration\nPreferred\nMicrosoft Purview\nMicrosoft Defender XDR\nTerraform\nInfrastructure as Code\nIntune\nDLP Technologies\nSecurity Automation and SOAR\nCompliance Management Platforms\nPreferred Certifications\nOne or more of the following:\nMicrosoft Certified: Cybersecurity Architect Expert (SC-100)\nMicrosoft Security Operations Analyst (SC-200)\nMicrosoft Identity and Access Administrator (SC-300)\nAzure Security Engineer Associate (AZ-500)\nAzure Administrator Associate (AZ-104)\nAWS Certified Security Specialty\nCISSP\nCISM\nGIAC Certifications\nSecurity+\nSuccess Metrics\nSuccessful completion of annual SOC 2 Type II audits.\nReduction in security incidents and mean time to respond (MTTR).\nIncreased security automation and operational efficiency.\nImproved vulnerability remediation timelines.\nSuccessful implementation and optimization of Microsoft Sentinel.\nCloud security posture improvements across Azure and AWS.\nCompletion of disaster recovery exercises and security testing initiatives.\nConsistent compliance with security policies and regulatory requirements.\nPhysical & Work Environment\nFully Remote\nParticipation in an on-call rotation for security incidents and critical infrastructure support.\nThis position is ideal for a hands-on engineer who enjoys both infrastructure modernization and cybersecurity leadership while helping drive a mature, audit-ready security program.\nFull compensation packages are based on candidate experience and relevant certifications.\n₹2,000,000—₹2,500,000 INR\nXO Health is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. XO Health promotes a drug-free workplace.","description_format":"text","description_chars":7429,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-09-11T08:26:41Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.216,"p_room":0.28,"age_days":69,"expected_fill_days":7,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":26545,"is_top_pay":false},"html_url":"https://alion.io/job/xohealthinc-cyber-security-infrastructure-engineer","json_url":"https://alion.io/job/xohealthinc-cyber-security-infrastructure-engineer.json","meta":{"generated_at":"2026-10-26T11:43:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15943,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685233},"rest":"https://alion.io/mcp/rest/get_company?id=685233"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxohealthinc-cyber-security-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxohealthinc-cyber-security-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxohealthinc-cyber-security-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xohealthinc-cyber-security-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxohealthinc-cyber-security-infrastructure-engineer"}]}