Lead Cyber Security Engineer

Baptist Health South Florida is hiring a Lead Cyber Security Engineer to strengthen the protection of organizational data, systems, and networks across on-premise and cloud environments. This onsite role in Florida focuses on security engineering leadership, incident response guidance, and driving penetration testing and security best practices.

You will oversee end-to-end security measures, help teams troubleshoot security and network issues, and ensure appropriate controls are in place to safeguard infrastructure and existing data. In addition, you will evaluate security needs, set standards, and coordinate communication with relevant departments.

Responsibilities

• Plan, implement, manage, monitor, and upgrade best-in-class security controls to protect data, systems, and networks on premise and in the cloud.
• Support and guide team members in troubleshooting security and network problems.
• Respond to system and network security breaches.
• Enable appropriate security controls to protect organizational data and infrastructure.
• Guide others in testing and identifying network and system vulnerabilities.
• Report and communicate security findings and status with relevant departments.
• Evaluate the organization’s security needs and establish best practices and standards accordingly.
• Design, implement, maintain, oversee, and upgrade security measures needed to protect data, systems, and networks.
• Oversee and coordinate others in responding to security breaches affecting network and associated systems.
• Troubleshoot network and security issues and incidents.
• Lead others in routinely conducting penetration testing.
• Take appropriate security measures to keep infrastructure and existing data safe.
• Guide others in conducting testing and scans to identify vulnerabilities in the network and system.

Requirements

• Bachelor’s degree.
• 7+ years of work experience producing clean quality code in one or more OOP languages or frameworks: Java, .NET, Python, or JavaScript.
• Familiarity with cloud security deployment and implementation issues, with AWS preferred.
• Experience manually auditing source code to find security issues.
• Proven ability to understand, replicate, and remediate OWASP TOP 10 vulnerabilities and their impact, using tools such as Burp, ZAP, and Fiddler.
• Experience defining security architecture standards in an enterprise organization, including common API security risks, OAuth, and JSON Web Token (JWT).
• Familiarity with CI/CD pipelines, build systems, and containerized architecture.
• Plus certifications such as OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar.
• Mobile app penetration testing experience is a plus.
• Experience across information security operations, including vulnerability management, risk management, computer and network security, authentication and authorization, security protocols, and applied cryptography.
• Experience guiding others in implementing and supporting information security policies, procedures, and practices for company-wide computing and networking systems.
• Ability to train others in security procedures and incident resolution.

Technologies

• Java, .NET, Python, JavaScript
• AWS
• Burp, ZAP, Fiddler
• OWASP TOP 10
• OAuth, JSON Web Token (JWT)
• CI/CD pipelines, containerized architecture

Benefits

• Career growth and development opportunities, with clear pathways and ongoing support.
• Comprehensive health and wellness resources beyond traditional benefits.
• A wellness program that can help employees eliminate their medical plan deductible, reducing out-of-pocket healthcare costs.
• Tuition reimbursement to support continued learning and advancement.

Location: Florida (onsite)
Salary: USD 126,148 - 163,993 per year
Minimum experience: 7 years