--- title: 'Cyber Security & Infrastructure Engineer at XO Health Inc.' canonical: 'https://feeny.ai/job/cyber-security-infrastructure-engineer-xo-health-inc-india-j8nztcg6abkb' type: 'job' last_seen: '2026-09-10' --- # Cyber Security & Infrastructure Engineer at XO Health Inc. - **Company:** XO Health Inc. - **Location:** India - **Compensation:** INR 2M–INR 2.5M - **Work type:** remote - **Posted:** 2026-08-17 - **Last confirmed live:** 2026-09-10 - **Apply:** https://job-boards.greenhouse.io/xohealthinc/jobs/5210101007 ## Job description XO Health believes healthcare is fixable. Become part of the community changing the face of the industry. XO Health is the first health plan designed by and for self-insured employers that delivers a more unified health experience for everyone – from those who receive care, to those who deliver it, to those who pay for it. We are growing a multi-disciplinary team of diverse and digitally empowered employees ready to rebuild trust in healthcare through comprehensive and unified transformation. CyberSecurity & Infrastructure Engineer - India (Remote) About the Role: The Cybersecurity & Infrastructure Engineer is responsible for designing, implementing, monitoring, and securing the organization's hybrid cloud and infrastructure environments. This role serves as a technical leader for cybersecurity operations, cloud security, compliance initiatives, infrastructure engineering, and incident response. The position combines hands-on infrastructure administration with cybersecurity engineering responsibilities across Microsoft Azure, Microsoft Sentinel, Microsoft 365, Entra ID, AWS, networking, endpoints, and security platforms. Engineering plays a key role in maintaining compliance with SOC 2 Type II controls, improving cyber resilience, supporting audits, and advancing the organization's security maturity. Responsibilities: SOC2 Audit - Support organization's annual SOC 2 Type II audit program, including control design, evidence collection, remediation management, auditor coordination, and continuous compliance monitoring. - Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change management controls are effectively implemented and operating throughout the audit period. - Drive successful completion of SOC 2 Type II examinations with minimal findings by maintaining an audit-ready environment, strengthening internal controls, and promoting a culture of security and compliance. - Develop and maintain policies, procedures, risk assessments, and control documentation necessary to support ongoing compliance and future audit readiness. Cybersecurity Operations - Administer and optimize Microsoft Sentinel SIEM platform. - Develop and maintain security monitoring, analytics rules, alerting, dashboards, and automation workflows. - Investigate security incidents and coordinate containment, remediation, and recovery activities. - Monitor and respond to threats identified through Microsoft Defender, Sentinel, AWS security services, and third-party platforms. - Conduct threat hunting, vulnerability management, and security assessments. - Lead incident response activities and coordinate forensic investigations as needed. - Maintain security documentation, playbooks, and response procedures. - Support penetration testing, tabletop exercises, and disaster recovery testing. Cloud Security & Architecture - Design and maintain secure Microsoft Azure environments. - Implement Azure security best practices utilizing: - Microsoft Entra ID - Conditional Access - Privileged Identity Management (PIM) - Defender for Cloud - Azure Security Center - Microsoft Purview - Secure AWS cloud environments including: - IAM - CloudTrail - GuardDuty - Security Hub - Config - CloudWatch - Implement zero-trust security principles across cloud platforms. Infrastructure Engineering - Maintain and support hybrid infrastructure environments including: - Microsoft Azure - AWS - Active Directory - Microsoft Entra ID - Windows Server - Virtualization platforms - Microsoft 365 - Network and security appliances - Design and implement high-availability and disaster recovery solutions. - Manage identity lifecycle and privileged access controls. - Support cloud migrations and infrastructure modernization initiatives. Governance, Risk & Compliance - Lead technical compliance activities supporting SOC 2 Type II audits. - Collaborate with external auditors and internal stakeholders during audit engagements. - Develop, maintain, and document security controls and evidence repositories. - Perform periodic access reviews, risk assessments, and control testing. - Recommend remediation activities to address audit findings and security gaps. - Support regulatory and contractual security requirements. Security Automation - Develop automation using: - PowerShell - Azure Automation - Logic Apps - Sentinel SOAR capabilities - Improve security operations through automated detection, response, and reporting. - Create executive and operational cybersecurity metrics and dashboards. We’re Looking for Candidates Who Have: Education Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field preferred. ## Experience - 3-5+ years of cybersecurity and infrastructure engineering experience. - 3+ years managing Microsoft Azure environments. - 2+ years administering Microsoft Sentinel or comparable SIEM platforms. - Experience supporting SOC 2 Type II audits. - Experience securing AWS cloud environments. - Experience with incident response and vulnerability management. - Experience with Microsoft 365 security technologies. Technical Skills Required - Microsoft Azure - Microsoft Sentinel - Microsoft Defender Suite - Microsoft Entra ID (Azure AD) - Active Directory - Microsoft 365 Security - AWS Security Services - PowerShell scripting - Vulnerability Management Platforms - Incident Response Procedures - Security Monitoring and SIEM Operations - Network Security Fundamentals - Firewall Administration ## Preferred - Microsoft Purview - Microsoft Defender XDR - Terraform - Infrastructure as Code - Intune - DLP Technologies - Security Automation and SOAR - Compliance Management Platforms ## Preferred Certifications One or more of the following: - Microsoft Certified: Cybersecurity Architect Expert (SC-100) - Microsoft Security Operations Analyst (SC-200) - Microsoft Identity and Access Administrator (SC-300) - Azure Security Engineer Associate (AZ-500) - Azure Administrator Associate (AZ-104) - AWS Certified Security Specialty - CISSP - CISM - GIAC Certifications - Security+ Success Metrics - Successful completion of annual SOC 2 Type II audits. - Reduction in security incidents and mean time to respond (MTTR). - Increased security automation and operational efficiency. - Improved vulnerability remediation timelines. - Successful implementation and optimization of Microsoft Sentinel. - Cloud security posture improvements across Azure and AWS. - Completion of disaster recovery exercises and security testing initiatives. - Consistent compliance with security policies and regulatory requirements. Physical & Work Environment - Fully Remote - Participation in an on-call rotation for security incidents and critical infrastructure support. This position is ideal for a hands-on engineer who enjoys both infrastructure modernization and cybersecurity leadership while helping drive a mature, audit-ready security program. Full compensation packages are based on candidate experience and relevant certifications. ₹2,000,000—₹2,500,000 INR XO Health is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. XO Health promotes a drug-free workplace. ## About XO Health Inc. ## Company Overview - **One-liner**: XO Health is a full-service, value-based health plan platform for self-insured employers that aligns plan administrators, providers, and patients around health as the real unit of value. - **Entity Type**: Private (Seed VC; raised $52.2M total) - **Headquarters**: Alpharetta, Georgia, United States (also has an office in Stamford, Connecticut) - **Founded**: 2021 - **Founders**: Not publicly available ## Core Business - **Primary industry/industries**: Healthcare (health insurance, value-based care, benefits platform) - **Target customers**: B2B – self-insured employers, payers, and providers - **Mission or purpose statement**: “To bring trust, transparency, and common sense to healthcare.” [xohealth.com](https://xohealth.com/about-us/) ## Products & Services - **Health Plan Solutions (for Employers)**: Fully integrated medical and pharmacy plans with a guaranteed savings model, tailored plan designs, and real-time data insights. - **Payment & Network Solutions (for Payers & Providers)**: Risk technology that enables value-based contracts at scale, including contract modeling, real-time payment orchestration, and clinical + financial reporting. - **Member Experience**: Inclusive care packages, expanded access, and dedicated advocacy, powered by a digital member experience platform (partnered with League). [businesswire.com](https://www.businesswire.com/news/home/20240306451755/en/XO-Health-Selects-League-to-Power-Industry%E2%80%99s-First-Fully-Integrated-Digital-Member-Experience) ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: Total funding of $52.2M (Seed VC round, October 2025) [cbinsights.com](https://www.cbinsights.com/company/xo-health) - **Notable Investors/Partners**: AlleyCorp, Sea Court Capital; strategic partners include Gravie, PayMedix, Kyruus Health, Simplify Healthcare, League, and National Cancer Treatment Alliance. - **Growth Signals**: 56 employees (+7% YoY); active job postings (+200% YoY); multiple new partnerships announced in 2024–2025; expanding alternative health plan nationwide. [linkedin.com](https://www.linkedin.com/company/xohealthinc) ## Competitive Advantages - **Alignment of incentives**: Platform aligns plan administrators, providers, and patients around health as the true unit of value, reducing friction and waste. - **Real-time data & analytics**: Risk technology that runs value-based contracts in real-time, eliminating painful reconciliation. - **Guaranteed savings**: Integrated medical and pharmacy plans with embedded savings guarantees for employers. - **Experienced leadership team**: Executives from diverse domains (insurance, technology, provider networks) uniquely positioned to disrupt the healthcare landscape. [xohealth.com](https://xohealth.com/about-us/) ## Strategic Focus - **Nationwide expansion**: Scaling the alternative health plan to more employers across the U.S. - **Deepening partnerships**: Collaborating with digital health platforms, pharmacy benefit managers, and provider networks to enhance the member experience. - **Technology platform**: Continuing to build out the next-generation operating platform for value-based care, with emphasis on real-time data and actionable insights. ## Why Work Here - **Mission-driven culture**: Opportunity to rebuild trust in healthcare and drive transformative change. - **Remote & hybrid options**: Some roles are remote (e.g., Senior Full Stack Engineer, India); other roles are office-based (Alpharetta, Stamford). - **Multi-disciplinary team**: Work alongside leaders from Cisco, Liberty Mutual, Elevance Health, and other top companies. [linkedin.com](https://www.linkedin.com/company/xohealthinc) - **Growth trajectory**: Young company (founded 2021) with significant funding and rapid partnership momentum – strong upside for early employees. - **Tech stack**: Modern tools including React, Angular, Node.js, GraphQL, Java, microservices, Terraform, GitHub Actions, and ServiceNow. [linkedin.com](https://www.linkedin.com/company/xohealthinc) ## Sources 1. [xohealth.com](https://xohealth.com/) – Homepage and About Us 2. [linkedin.com](https://www.linkedin.com/company/xohealthinc) – LinkedIn company page 3. [cbinsights.com](https://www.cbinsights.com/company/xo-health) – CB Insights company profile 4. [greenhouse.io](https://job-boards.greenhouse.io/xohealthinc) – Careers page 5. [businesswire.com](https://www.businesswire.com/news/home/20240306451755/en/XO-Health-Selects-League-to-Power-Industry%E2%80%99s-First-Fully-Integrated-Digital-Member-Experience) – League partnership announcement 6. [endpointsnews.com](https://endpts.com/how-a-startup-is-reimagining-health-insurance-as-employers-search-for-new-options/) – Endpoints News feature 7. [pymnts.com](https://www.pymnts.com/news/partnerships/2025/paymedix-launches-partnership-with-benefits-platform-xo-health/) – PayMedix partnership 8. [coverager.com](https://www.coverager.com/gravie-partners-with-xo-health-to-launch-in-minnesota/) – Gravie partnership ## Other roles at XO Health Inc. - [Healthcare Actuary](https://feeny.ai/job/healthcare-actuary-xo-health-inc-remote-kz47jqxdw4b9) - [Healthcare Support Advocate](https://feeny.ai/job/healthcare-support-advocate-xo-health-inc-united-states-10a6rba3szc3) — United States - [Health Product Manager, Claims](https://feeny.ai/job/health-product-manager-claims-xo-health-inc-india-wzte1g9t2z0z) — India - [Senior Full Stack Engineer](https://feeny.ai/job/senior-full-stack-engineer-xo-health-inc-india-fce7dz8djwq6) — India - [Healthcare Support Representative](https://feeny.ai/job/healthcare-support-representative-xo-health-inc-india-hhwgw6dmx6c6) — India