Security Engineer

The Security Engineer will help protect Abarca Health’s cloud infrastructure and sensitive data by identifying gaps, driving remediation, and supporting incident response.

Responsibilities

• Lead security initiatives, including creation and maintenance of security policies, implementation of security procedures and controls, and monitoring aligned to policy
• Deploy and manage applications used to monitor cloud infrastructure security and detect intrusions
• Conduct initial incident triage, including determining scope, urgency, and potential impact
• Support external auditors with compliance guidance and provide security guidance to Engineering teams
• Perform security gap assessments and implement remediation actions
• Run periodic infrastructure vulnerability scans and perform pen testing; coordinate with engineering teams to resolve identified issues
• Partner with network and infrastructure teams to secure environments and follow best practices across Azure, IBM Cloud, and on-premises, including OS hardening, access logging, and patching
• Own the overall cloud infrastructure security program, including driving incident response and resolution and adjusting procedures as needed
• Track and monitor industry security updates, technology changes, emerging threats, and best practices to enable continuous improvement

Requirements

• Bachelor’s Degree or Master’s Degree in Computer Science, Information Security, or a related area (equivalent relevant experience may be considered in lieu of a degree)
• 3+ years of experience in Infrastructure and Information Security
• 3+ years working with Azure or AWS, including running multiple production workloads
• Experience with OS hardening techniques for Windows environments
• Experience with access logging, centralized logging, and monitoring/alerting for security log events
• Experience building or using applications to monitor infrastructure security and detect intrusions
• Experience designing and implementing access control models for privileged access in fast-paced cloud environments
• Experience with incident response, threat modeling, and mitigation, including common information security management frameworks such as ISO27001
• Experience with Azure security best practices and security controls using Azure services (AWS experience considered)
• Familiarity with common internet protocols such as DNS, DHCP, SMTP, LDAP, etc.
• Excellent oral and written communication skills
• Hybrid role in San Juan, PR, requiring certain on-site days (Puerto Rico location only)
• Ability to work in a specified time zone or schedule based on business needs
• May require availability for on-call hours, including evenings, weekends, and holidays (if applicable)

Technologies

• Azure
• AWS
• IBM Cloud
• ISO27001
• DNS, DHCP, SMTP, LDAP
• Windows, Linux

Nice to Have

• Security certifications such as CISSP, CCSP, CEH, CISM, etc.
• Experience with HCI technology
• Experience with OS hardening techniques for Linux

Physical Requirements

• Ability to access and navigate each department at the organization’s facilities
• Sedentary work primarily involving sitting/standing