Security Engineer

The Security Engineer will be a key member of Abarca Health’s security team, with responsibility for protecting cloud infrastructure and safeguarding PHI & PII data. This role emphasizes gap identification, remediation execution, and support for security strategy, architecture, practices, and incident response.

Key Responsibilities

• Lead security initiatives, including creation and maintenance of security policies, implementation of security procedures and controls, and ongoing monitoring aligned to policy requirements.
• Deploy and manage monitoring applications to assess cloud infrastructure security and detect intrusions.
• Conduct initial security incident triage by evaluating scope, urgency, and potential impact.
• Support external auditors with compliance-related guidance and advise Engineering teams on applicable security measures.
• Perform security gap assessments and implement remediation actions.
• Run periodic infrastructure vulnerability scans and penetration testing, then coordinate with engineering teams to drive resolution of identified vulnerabilities.
• Collaborate with network and infrastructure teams to secure Azure, IBM Cloud, and on-premises environments, including OS hardening, access logging, and patching.
• Own the overall cloud infrastructure security program, driving incident response and resolution and updating procedures as needed.
• Track industry security updates, changes in technologies, emerging threats, and evolving best practices to support continuous improvement.

Required Qualifications

• Bachelor’s Degree or Master’s Degree in Computer Science, Information Security, or a related area; equivalent relevant experience may be considered in lieu of a degree.
• 3+ years of experience in Infrastructure and Information Security.
• 3+ years working on Azure or AWS while running multiple production workloads.
• Experience applying OS hardening techniques for Windows environments.
• Experience with access logging, centralized logging, and monitoring/alerting of security log events.
• Experience using applications to monitor infrastructure security and detect intrusions.
• Experience designing and implementing access control models for privileged access in fast-paced cloud environments.
• Experience with incident response, threat modeling, and mitigation, including familiarity with common information security management frameworks such as ISO27001.
• Experience with Azure security best practices and security controls using Azure services (AWS experience will be considered).
• Experience with common internet protocols including DNS, DHCP, SMTP, and LDAP (etc.).
• Excellent oral and written communication skills.
• Ability to work with business needs based on a specified time zone or working schedule.
• Potential availability for on-call hours, including evenings, weekends, and holidays, to address emergent issues or provide operational support (if applicable).

Preferred Qualifications

• Security-related certification such as CISSP, CCSP, CEH, or CISM, etc.
• Experience with HCI technology.
• Experience applying OS hardening techniques for Linux.

Technologies

• Azure, AWS, IBM Cloud
• ISO27001
• DNS, DHCP, SMTP, LDAP
• Windows, Linux

Work Location and Model

San Juan, PR (hybrid). The flexible hybrid work model requires certain on-site work days (Puerto Rico location only).

Physical Requirements

• Must be able to access and navigate each department at the organization’s facilities.
• Sedentary work primarily involving sitting/standing.

Education

Bachelor’s Degree or Master’s Degree in Computer Science, Information Security, or a related area.