Principal Cloud Cyber Security Engineer, Technology and Digital, FT, 8:30A - 5P

Baptist Health; Town of Florida (NY); On-site; USD 145,000 - 188,000; Full time

Job summary

Baptist Health is seeking an experienced security engineer to plan, implement, and manage enterprise security across on-premises and cloud environments. You will lead vulnerability testing, tune security controls, and guide teams in incident response.

Ideal candidates bring 8+ years of software security experience, cloud security knowledge (prefer AWS), and proficiency in Java, .NET, Python, or JavaScript. Certifications like CISSP or OSCP are a plus.

Qualifications

• 8+ years of work experience producing clean quality code in one or more OOP languages: Java, .NET, Python, or JavaScript frameworks.
• Familiarity with cloud security deployment and implementation issues (AWS preferred).
• Experience auditing source code to find security issues or programming skills.
• Proven ability to understand, replicate, remediate OWASP TOP 10 vulnerabilities & impact.
• Experience defining security architecture standards in an enterprise organization and common API security risks, OAuth, and JWT.
• Familiarity with CI/CD pipelines, build systems, and containerized architecture.
• Plus security certifications: OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar.
• Mobile App Pen Testing experience is a plus.
• Experience in information security operations: vulnerability/risk management, authentication & authorization, security protocols, and cryptography.
• Ability to train others in security procedures and incident resolution.

Responsibilities

• Plan, implement, manage, monitor, and upgrade security measures for data, systems, and networks, both on premise and in the cloud.
• Guide team members in troubleshooting security and network problems; respond to security breaches.
• Ensure the organization's data and infrastructure are protected by enabling appropriate security controls.
• Guide others in testing and identifying network and system vulnerabilities; lead penetration testing.
• Report and communicate with relevant departments; establish best practices and standards.

Skills

Security engineering

Threat modeling

OWASP Top 10

Security architecture

Incident response

Education

Bachelor's degree

Tools

Java

.NET

Python

JavaScript

Job description

Baptist Health is the region's largest not-for-profit healthcare organization, with 12 hospitals, over 29,000 employees, 4,500 physicians and 200 outpatient centers, urgent care facilities and physician practices across Miami-Dade, Monroe, Broward and Palm Beach counties. With internationally renowned centers of excellence in cancer, cardiovascular care, orthopedics and sports medicine, and neurosciences, Baptist Health is supported by philanthropy and driven by its faith-based mission of medical excellence. For 26 years, we've been named one of Fortune's 100 Best Companies to Work For, and in the 2025-2026 U.S. News & World Report Best Hospital Rankings, Baptist Health was the most awarded healthcare system in South Florida, earning 63 high-performing honors.

What truly sets us apart is our people. At Baptist Health, we create personal connections with our colleagues that go beyond the workplace, and we form meaningful relationships with patients and their families that extend beyond delivering care. Many of us have walked in our patients' shoes ourselves and that shared experience fuels out commitment to compassion and quality. Our culture is rooted in purpose, and every team member plays a part in making a positive impact – because when it comes to caring for people, we're all in.

Benefits

At Baptist Health, we're committed to supporting our employees at every stage of their journey, both personally and professionally. Our approach is rooted in a “grow our own” philosophy, designed to help our team members build meaningful, long-term careers with us, supported by benefits that make a real difference, including:

• Career growth and development opportunities, with clear pathways and ongoing support
• Comprehensive health and wellness resources that go beyond traditional benefits
• A wellness program that can help employees eliminate their medical plan deductible, reducing out-of-pocket healthcare costs
• Tuition reimbursement to support continued learning and advancement
• And so much more

Together, these benefits and others reflect our commitment to caring for our people, so they can build fulfilling careers with us while making a meaningful impact every day.

Description

Plan, implement, manage, monitor, and upgrade best in class security measures for the protection data, systems, and networks, both on premise and in the cloud. Help guide team members in troubleshooting security and network problems. Respond to all system and/or network security breaches. Ensure that the organization's data and infrastructure are protected by enabling the appropriate security controls. Guide others in testing and identifying network and system vulnerabilities. Report and communicate with relevant departments in the organization. Evaluate the organization's security needs and establish best practices and standards accordingly. Design, implement, maintain, oversee, and upgrade all security measures needed to protect data, systems, and networks. Oversee others in responding to all security breaches to the network and associated systems. Troubleshoot all network and security issues and incidents. Lead others to routinely conduct penetration testing. Take appropriate security measures to ensure that the organization's infrastructure and existing data are kept safe. Guide others in conducting testing and scans to identify any vulnerabilities in the network and system.

Estimated salary range for this position is $144738.24 - $188159.71 / year depending on experience.

Qualifications

• Bachelors.

Additional Qualifications

• 8+ years of work experience producing clean quality code in one more OOP language: Java, .NET, Python, or JavaScript frameworks.
• Demonstrate familiarity in cloud security deployment and implementation issues (AWS preferred).
• Experience with manually auditing source code to find security issues or programming skills.
• Proven ability to understand, replicate, remediate OWASP TOP 10 vulnerabilities & impact (proxies such as Burp, ZAP, Fiddler).
• Experience defining security architecture standards in an enterprise organization and common API security risks, OAuth, and JSON Web Token (JWT).
• Familiarity with CI/CD pipelines, build systems, and containerized architecture.
• Plus Certifications: OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar security cert.
• Mobile App Pen Testing experience is a plus.
• Experience in all facets of information security operations, including vulnerability management, risk management, computer and network security, authentication & authorization, security protocols, and applied cryptography.
• Experience in guiding others to implement and support information security policies and procedures and security practices for company-wide computing and networking systems.
• Ability to train others in security procedures and incident resolution.

Minimum Required Experience: 8 Years

EOE, including disability/vets