Cyber Security Engineer – Infrastructure

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

XO Health Inc.

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏥 Healthcare

🛡️ Insurance

⚕️ Healthcare Insurance

Healthcare • Insurance • Healthcare Insurance

XO Health Inc. is a company that provides comprehensive, tech-enabled health benefit solutions specifically designed for the self-insured market. Their services cater to self-insured employers, brokers and consultants, and third-party administrators, aiming to unify the healthcare experience. XO Health offers a value-based provider network, member advocacy and care navigation, integrated medical and pharmacy plans, and employer stop-loss coverage. Their solutions are focused on balancing cost and quality, providing flexible and tailored healthcare solutions for employers.

📋 Description

• Support the organization's annual SOC 2 Type II audit program, including control design, evidence collection, remediation management, auditor coordination, and continuous compliance monitoring • Partner with business and technology stakeholders to implement security, availability, confidentiality, and change management controls • Maintain an audit-ready environment and strengthen internal controls • Develop and maintain policies, procedures, risk assessments, and control documentation • Administer and optimize Microsoft Sentinel SIEM • Develop security monitoring, analytics rules, alerting, dashboards, and automation workflows • Investigate security incidents and coordinate containment, remediation, and recovery • Monitor and respond to threats through Microsoft Defender, Sentinel, AWS security services, and third-party platforms • Conduct threat hunting, vulnerability management, and security assessments • Lead incident response and coordinate forensic investigations • Maintain security documentation, playbooks, and response procedures • Support penetration testing, tabletop exercises, and disaster recovery testing • Design and maintain secure Microsoft Azure environments • Implement Azure security best practices using Entra ID, Conditional Access, PIM, Defender for Cloud, Azure Security Center, and Microsoft Purview • Secure AWS cloud environments using IAM, CloudTrail, GuardDuty, Security Hub, Config, and CloudWatch • Implement zero-trust security principles across cloud platforms • Maintain and support hybrid infrastructure including Azure, AWS, Active Directory, Entra ID, Windows Server, virtualization platforms, Microsoft 365, and network/security appliances • Design and implement high-availability and disaster recovery solutions • Manage identity lifecycle and privileged access controls • Support cloud migrations and infrastructure modernization • Lead technical compliance activities for SOC 2 Type II audits • Collaborate with external auditors and internal stakeholders • Develop and maintain security controls and evidence repositories • Perform access reviews, risk assessments, and control testing • Recommend remediation for audit findings and security gaps • Support regulatory and contractual security requirements • Develop security automation using PowerShell, Azure Automation, Logic Apps, and Sentinel SOAR • Improve automated detection, response, and reporting • Create executive and operational cybersecurity metrics and dashboards

🎯 Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field preferred • 3-5+ years of cybersecurity and infrastructure engineering experience • 3+ years managing Microsoft Azure environments • 2+ years administering Microsoft Sentinel or comparable SIEM platforms • Experience supporting SOC 2 Type II audits • Experience securing AWS cloud environments • Experience with incident response and vulnerability management • Experience with Microsoft 365 security technologies • Microsoft Azure • Microsoft Sentinel • Microsoft Defender Suite • Microsoft Entra ID (Azure AD) • Active Directory • Microsoft 365 Security • AWS Security Services • PowerShell scripting • Vulnerability Management Platforms • Incident Response Procedures • Security Monitoring and SIEM Operations • Network Security Fundamentals • Firewall Administration • Preferred: Microsoft Purview, Microsoft Defender XDR, Terraform, Infrastructure as Code, Intune, DLP Technologies, Security Automation and SOAR, Compliance Management Platforms • Preferred certifications include SC-100, SC-200, SC-300, AZ-500, AZ-104, AWS Certified Security Specialty, CISSP, CISM, GIAC Certifications, and Security+

🏖️ Benefits

• Fully Remote • Participation in an on-call rotation for security incidents and critical infrastructure support