Product Security Engineer: Shape Secure SDLC & Cloud

Kforce Inc; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Job summary

Kforce Inc in Boston, MA seeks a Product Security Engineer to partner with software teams and embed security throughout the development lifecycle. The role emphasizes secure coding practices, threat modeling, and applying modern security controls across CI/CD pipelines.

Ideal candidates have 7+ years in product or application security, strong knowledge of secure SDLC, and hands-on security testing, vulnerability remediation, and code reviews.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 7+ years of experience in Application Security, Product Security, or a closely related security engineering role.
• Strong understanding of secure SDLC practices and modern web application architecture.
• Experience partnering directly with software development teams.
• Hands-on experience with application security testing, vulnerability remediation, and security assessments.
• Experience performing code reviews and providing secure development guidance.
• Familiarity with cloud security and DevSecOps practices.
• Knowledge of OWASP Top 10 and common web application vulnerabilities.
• Experience securing CI/CD pipelines and integrating security into development workflows.
• Strong communication skills with the ability to influence both technical and non-technical stakeholders.

Responsibilities

• Partner with software engineers and technical leaders to promote secure coding practices and security-by-design principles.
• Perform application security assessments and penetration testing activities.
• Identify vulnerabilities and guide teams through remediation efforts.
• Conduct code reviews and provide recommendations to improve application security.
• Help design and implement security controls for internally developed and customer-facing applications.
• Integrate security tooling and controls into CI/CD pipelines and development workflows.
• Participate in threat modeling, security architecture reviews, and secure SDLC initiatives.
• Develop and maintain security standards, policies, and best practices.
• Support incident response activities related to application and product security.
• Deliver security education and awareness programs for engineering teams.
• Stay current on emerging threats, vulnerabilities, and security technologies.

Skills

Security mindset

Vulnerability assessment

Threat modeling

Secure SDLC

CI/CD security

OWASP Top 10

Cross-team collaboration

Code review guidance

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

CI/CD tooling

Cloud security

Job description

Kforce Inc in Boston, MA seeks a Product Security Engineer to partner with software teams and embed security throughout the development lifecycle. The role emphasizes secure coding practices, threat modeling, and applying modern security controls across CI/CD pipelines.

Ideal candidates have 7+ years in product or application security, strong knowledge of secure SDLC, and hands-on security testing, vulnerability remediation, and code reviews.