Security Engineer

Abarca Health; San Juan (PR); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Abarca Health is seeking a Security Engineer to protect our cloud infrastructure and sensitive data by identifying gaps, driving remediation, and supporting incident response.

You will lead security initiatives, deploy monitoring, conduct incident triage, and collaborate with Engineering to align with ISO27001 and industry best practices across Azure, IBM Cloud, and on‑premises. The role is hybrid with on‑site days in San Juan, PR, requiring some weekend/on‑call availability.

Qualifications

• Bachelor’s or Master’s in Computer Science or Information Security (equivalent experience allowed).
• 3+ years in Infrastructure and Information Security.
• 3+ years with Azure or AWS and running production workloads.
• Experience with OS hardening for Windows environments.
• Experience with access logging, centralized logging, and monitoring/alerting for security events.
• Experience building or using applications to monitor infrastructure security and detect intrusions.
• Experience designing access control models for privileged access in cloud environments.
• Experience with incident response, threat modeling, and ISO27001.
• Experience with Azure security best practices and Azure services (AWS experience acceptable).
• Familiarity with DNS, DHCP, SMTP, LDAP.

Responsibilities

• Lead security initiatives, including creation and maintenance of security policies, procedures and controls, and monitoring per policy.
• Deploy and manage applications to monitor cloud infrastructure security and detect intrusions.
• Conduct initial incident triage, including determining scope, urgency, and potential impact.
• Support external auditors with compliance guidance and provide security guidance to Engineering teams.
• Perform security gap assessments and remediation actions.
• Run periodic infrastructure vulnerability scans and coordinate pen testing with engineering teams.
• Partner with network and infrastructure teams to secure environments across Azure, IBM Cloud, and on-premises, including OS hardening and patching.
• Own the overall cloud infrastructure security program, driving incident response and updating procedures as needed.
• Track and monitor industry security updates, technology changes, emerging threats, and best practices for continuous improvement.

Skills

Infra & InfoSec

Incident response

Threat modeling

OS hardening

Access control models

Vulnerability management

Security monitoring

Security architecture

Education

Bachelor’s or Master’s in CS/InfoSec

Tools

Azure

AWS

IBM Cloud

ISO27001

DNS

DHCP

SMTP

LDAP

Windows

Linux

Job description

The Security Engineer will help protect Abarca Health’s cloud infrastructure and sensitive data by identifying gaps, driving remediation, and supporting incident response.

Responsibilities

• Lead security initiatives, including creation and maintenance of security policies, implementation of security procedures and controls, and monitoring aligned to policy
• Deploy and manage applications used to monitor cloud infrastructure security and detect intrusions
• Conduct initial incident triage, including determining scope, urgency, and potential impact
• Support external auditors with compliance guidance and provide security guidance to Engineering teams
• Perform security gap assessments and implement remediation actions
• Run periodic infrastructure vulnerability scans and perform pen testing; coordinate with engineering teams to resolve identified issues
• Partner with network and infrastructure teams to secure environments and follow best practices across Azure, IBM Cloud, and on-premises, including OS hardening, access logging, and patching
• Own the overall cloud infrastructure security program, including driving incident response and resolution and adjusting procedures as needed
• Track and monitor industry security updates, technology changes, emerging threats, and best practices to enable continuous improvement

Requirements

• Bachelor’s Degree or Master’s Degree in Computer Science, Information Security, or a related area (equivalent relevant experience may be considered in lieu of a degree)
• 3+ years of experience in Infrastructure and Information Security
• 3+ years working with Azure or AWS, including running multiple production workloads
• Experience with OS hardening techniques for Windows environments
• Experience with access logging, centralized logging, and monitoring/alerting for security log events
• Experience building or using applications to monitor infrastructure security and detect intrusions
• Experience designing and implementing access control models for privileged access in fast-paced cloud environments
• Experience with incident response, threat modeling, and mitigation, including common information security management frameworks such as ISO27001
• Experience with Azure security best practices and security controls using Azure services (AWS experience considered)
• Familiarity with common internet protocols such as DNS, DHCP, SMTP, LDAP, etc.
• Excellent oral and written communication skills
• Hybrid role in San Juan, PR, requiring certain on-site days (Puerto Rico location only)
• Ability to work in a specified time zone or schedule based on business needs
• May require availability for on-call hours, including evenings, weekends, and holidays (if applicable)

Technologies

• Azure
• AWS
• IBM Cloud
• ISO27001
• DNS, DHCP, SMTP, LDAP
• Windows, Linux

Nice to Have

• Security certifications such as CISSP, CCSP, CEH, CISM, etc.
• Experience with HCI technology
• Experience with OS hardening techniques for Linux

Physical Requirements

• Ability to access and navigate each department at the organization’s facilities
• Sedentary work primarily involving sitting/standing