Security Engineer

Overview Abarca is igniting a revolution in healthcare. We built our company on the belief that with smarter technology we are redefining pharmacy benefits, but this is just the beginning… The Security Engineer is a key member of the security team, instrumental in ensuring the security of our cloud infrastructure and protection of sensitive data (PHI & PII). In this role you will identify security gaps and drive remediation activities, play an integral role in defining and assessing the organization's security strategy, architecture, and practices, and help mature the company's infrastructure security architecture and technology frameworks. Responsibilities Drive security related initiatives including creation and maintenance of security policies, implementation of security procedures and controls, and monitoring in conformance to the policy. Deploy and manage applications to monitor cloud infrastructure security and intrusions. Perform initial incident triage, determine scope, urgency, and potential impact of security incidents. Provide guidance to external auditors on compliance and to Engineering teams on security measures. Perform security gap assessments and implement remediations. Run periodic infrastructure vulnerability scans and pen testing and work with engineering teams on identified vulnerabilities for resolution. Collaborate with network and infrastructure teams on securing and best practices for all our Azure, IBM Cloud, and on‑premises environments, as well as OS hardening, access logging, and patching. Own the overall cloud infrastructure security program including driving incident response and resolution and adjusting procedures as applicable. Monitor industry security updates, changes, technologies, emerging threats, and best practices for continuous improvement. Qualifications Bachelor’s Degree or Master’s Degree in Computer Science, Information Security, or a related area. (Equivalent relevant experience may be considered.) 3+ years of experience in Infrastructure and Information Security. 3+ years working on Azure or AWS running multiple production workloads. Experience with OS hardening techniques for Windows environments. Experience with access logging, centralized logging, and monitoring/alerting of security log events. Experience with applications for monitoring infrastructure security and detecting intrusions. Experience designing and implementing access control models for privileged access in fast‑paced cloud environments. Experience with incident response, threat modeling, and mitigation, and with ISO27001 framework. Experience with Azure security best practices and security controls using Azure services (AWS experience will be considered). Experience with common internet protocols such as DNS, DHCP, SMTP, LDAP, etc. Excellent oral and written communication skills. Ability to work in a flexible hybrid model with required on‑site days (Puerto Rico location only). Availability to work in the specified time zone and for on‑call hours as required. Nice to Haves Security‑related certifications such as CISSP, CCSP, CEH, CISM, etc. Experience with HCI technology. Experience with OS hardening techniques for Linux. Physical Requirements Must be able to access and navigate each department at the organization’s facilities. Sedentary work involving sitting/standing. At Abarca we value and celebrate diversity. Diversity, equity, inclusion, and belonging are guiding principles of Abarca and ensure Abarca’s workforce reflects the communities it serves. We are proud to provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, medical condition, genetic information, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Abarca Health LLC is an equal employment opportunity employer and participates in E‑Verify. “Abarca Health LLC does not sponsor employment visas at this time” The above description is not intended to limit the scope of the job or to exclude other duties not mentioned. It is not a final set of specifications for the position. It’s simply meant to give readers an idea of what the role entails. #J-18808-Ljbffr