Lead Cyber Security Engineer

Baptist Health South Florida is seeking a Lead Cyber Security Engineer to strengthen protections for data, systems, and networks across on-premise environments and cloud infrastructure. This role oversees security programs, supports incident and vulnerability troubleshooting, and helps drive penetration testing and security best practices.

This position is based in Florida (onsite) and offers a salary range of USD 126,148 - 163,993 per yearly.

Responsibilities

• Plan, implement, manage, monitor, and upgrade best-in-class security measures to protect organizational data, systems, and networks in both on-premise and cloud environments.
• Support team members by guiding troubleshooting for security and network problems.
• Respond to system and network security breaches.
• Enable appropriate security controls to protect organizational data and infrastructure.
• Guide others in testing and identifying network and system vulnerabilities.
• Evaluate organizational security needs and establish best practices and standards accordingly.
• Design, implement, maintain, oversee, and upgrade security measures required to protect data, systems, and networks.
• Oversee others in responding to security breaches affecting the network and associated systems.
• Troubleshoot network and security incidents and issues.
• Lead others in routinely conducting penetration testing.
• Guide testing and scanning activities to identify vulnerabilities across the network and system.
• Report and communicate with relevant departments within the organization.
• Ensure infrastructure and existing data remain safe through appropriate security measures.

Requirements

• Bachelor’s degree.
• 7+ years of work experience producing clean quality code in one or more object-oriented programming languages: Java, .NET, Python, or JavaScript frameworks.
• Familiarity with cloud security deployment and implementation issues, with AWS preferred.
• Experience manually auditing source code to find security issues and applying programming skills to remediation.
• Proven ability to understand, replicate, and remediate OWASP TOP 10 vulnerabilities and their impact using tools such as Burp, ZAP, and Fiddler.
• Ability to define security architecture standards in an enterprise organization, including awareness of common API security risks, OAuth, and JSON Web Token (JWT).
• Familiarity with CI/CD pipelines, build systems, and containerized architecture.
• Plus certifications: OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar security certifications.
• Mobile App Pen Testing experience is a plus.
• Experience across information security operations, including vulnerability management, risk management, computer and network security, authentication and authorization, security protocols, and applied cryptography.
• Experience guiding others to implement and support information security policies, procedures, and security practices for company-wide computing and networking systems.
• Ability to train others in security procedures and incident resolution.

Technologies

• Java, .NET, Python, JavaScript
• AWS
• Burp, ZAP, Fiddler
• OWASP TOP 10
• OAuth, JSON Web Token (JWT)
• CI/CD pipelines
• Containerized architecture

Benefits

• Career growth and development opportunities, with clear pathways and ongoing support.
• Comprehensive health and wellness resources that go beyond traditional benefits.
• A wellness program that can help employees eliminate their medical plan deductible, reducing out-of-pocket healthcare costs.
• Tuition reimbursement to support continued learning and advancement.