Cyber Security & Infrastructure Engineer at XO Health Inc. · Delhi

CyberSecurity & Infrastructure Engineer - India (Remote)

About the Role:

The Cybersecurity & Infrastructure Engineer is responsible for designing, implementing, monitoring, and securing the organization's hybrid cloud and infrastructure environments. This role serves as a technical leader for cybersecurity operations, cloud security, compliance initiatives, infrastructure engineering, and incident response.

The position combines hands-on infrastructure administration with cybersecurity engineering responsibilities across Microsoft Azure, Microsoft Sentinel, Microsoft 365, Entra ID, AWS, networking, endpoints, and security platforms. Engineering plays a key role in maintaining compliance with SOC 2 Type II controls, improving cyber resilience, supporting audits, and advancing the organization's security maturity.

Responsibilities:

SOC2 Audit

• Support organization's annual SOC 2 Type II audit program, including control design, evidence collection, remediation management, auditor coordination, and continuous compliance monitoring.
• Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change management controls are effectively implemented and operating throughout the audit period.
• Drive successful completion of SOC 2 Type II examinations with minimal findings by maintaining an audit-ready environment, strengthening internal controls, and promoting a culture of security and compliance.
• Develop and maintain policies, procedures, risk assessments, and control documentation necessary to support ongoing compliance and future audit readiness.

Cybersecurity Operations

• Administer and optimize Microsoft Sentinel SIEM platform.
• Develop and maintain security monitoring, analytics rules, alerting, dashboards, and automation workflows.
• Investigate security incidents and coordinate containment, remediation, and recovery activities.
• Monitor and respond to threats identified through Microsoft Defender, Sentinel, AWS security services, and third-party platforms.
• Conduct threat hunting, vulnerability management, and security assessments.
• Lead incident response activities and coordinate forensic investigations as needed.
• Maintain security documentation, playbooks, and response procedures.
• Support penetration testing, tabletop exercises, and disaster recovery testing.

Cloud Security & Architecture

• Design and maintain secure Microsoft Azure environments.
• Implement Azure security best practices utilizing:
  • Microsoft Entra ID
  • Conditional Access
  • Privileged Identity Management (PIM)
  • Defender for Cloud
  • Azure Security Center
  • Microsoft Purview
• Secure AWS cloud environments including:
  • IAM
  • CloudTrail
  • GuardDuty
  • Security Hub
  • Config
  • CloudWatch
• Implement zero-trust security principles across cloud platforms.

Infrastructure Engineering

• Maintain and support hybrid infrastructure environments including:
  • Microsoft Azure
  • AWS
  • Active Directory
  • Microsoft Entra ID
  • Windows Server
  • Virtualization platforms
  • Microsoft 365
  • Network and security appliances
• Design and implement high-availability and disaster recovery solutions.
• Manage identity lifecycle and privileged access controls.
• Support cloud migrations and infrastructure modernization initiatives.

Governance, Risk & Compliance

• Lead technical compliance activities supporting SOC 2 Type II audits.
• Collaborate with external auditors and internal stakeholders during audit engagements.
• Develop, maintain, and document security controls and evidence repositories.
• Perform periodic access reviews, risk assessments, and control testing.
• Recommend remediation activities to address audit findings and security gaps.
• Support regulatory and contractual security requirements.

Security Automation

• Develop automation using:
  • PowerShell
  • Azure Automation
  • Logic Apps
  • Sentinel SOAR capabilities
• Improve security operations through automated detection, response, and reporting.
• Create executive and operational cybersecurity metrics and dashboards.

We're Looking for Candidates Who Have:

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field preferred.

Experience

• 3-5+ years of cybersecurity and infrastructure engineering experience.
• 3+ years managing Microsoft Azure environments.
• 2+ years administering Microsoft Sentinel or comparable SIEM platforms.
• Experience supporting SOC 2 Type II audits.
• Experience securing AWS cloud environments.
• Experience with incident response and vulnerability management.
• Experience with Microsoft 365 security technologies.

Technical Skills

Required

• Microsoft Azure
• Microsoft Sentinel
• Microsoft Defender Suite
• Microsoft Entra ID (Azure AD)
• Active Directory
• Microsoft 365 Security
• AWS Security Services
• PowerShell scripting
• Vulnerability Management Platforms
• Incident Response Procedures
• Security Monitoring and SIEM Operations
• Network Security Fundamentals
• Firewall Administration

Preferred

• Microsoft Purview
• Microsoft Defender XDR
• Terraform
• Infrastructure as Code
• Intune
• DLP Technologies
• Security Automation and SOAR
• Compliance Management Platforms

Preferred Certifications

One or more of the following:

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Identity and Access Administrator (SC-300)
• Azure Security Engineer Associate (AZ-500)
• Azure Administrator Associate (AZ-104)
• AWS Certified Security Specialty
• CISSP
• CISM
• GIAC Certifications
• Security+

Success Metrics

• Successful completion of annual SOC 2 Type II audits.
• Reduction in security incidents and mean time to respond (MTTR).
• Increased security automation and operational efficiency.
• Improved vulnerability remediation timelines.
• Successful implementation and optimization of Microsoft Sentinel.
• Cloud security posture improvements across Azure and AWS.
• Completion of disaster recovery exercises and security testing initiatives.
• Consistent compliance with security policies and regulatory requirements.

Physical & Work Environment

• Fully Remote
• Participation in an on-call rotation for security incidents and critical infrastructure support.

This position is ideal for a hands-on engineer who enjoys both infrastructure modernization and cybersecurity leadership while helping drive a mature, audit-ready security program.