Remote Security Engineer: AppSec & Threat Modeling

Kforce Inc; San Diego (CA); Remote; USD 120,000 - 170,000; Full time

Job summary

Kforce Inc. is seeking a fully remote Security Engineer to collaborate with Engineering on identifying, validating, and remediating security risks across applications, cloud infrastructure, containers, and the SDLC.

The role blends application security, attacker mindset, and security automation, and requires reading source code with developers to build more secure systems. The ideal candidate has hands-on experience in application security, review of code for vulnerabilities, and strong

Qualifications

• Hands-on application security experience and ability to review source code.
• Proficiency with languages such as Python, Go, Java, C#, or C/C++.
• Experience with SAST/DAST/SCA and threat modeling.
• Strong collaboration with engineers and CI/CD processes.

Responsibilities

• Perform secure source code reviews for vulnerabilities in apps, APIs, and services.
• Build threat models for new and existing systems.
• Collaborate with engineers to remediate findings and drive closure.
• Review SAST/DAST/SCA, dependency, container, and SBOM findings and prioritize risk.
• Conduct hands-on security testing and reproduce vulnerabilities to confirm exploitability.
• Develop security tooling and automation using Python or Go.
• Work with Docker, CI/CD pipelines, Terraform, Ansible, or Salt.
• Support AWS cloud security and contribute to security architecture.
• Integrate security into engineering workflows to detect issues earlier.

Skills

Application security

Threat modeling

CI/CD security

Security automation

Code review

Tools

Snyk

Burp Suite

OWASP ZAP

Terraform

Job description

Kforce Inc. is seeking a fully remote Security Engineer to collaborate with Engineering on identifying, validating, and remediating security risks across applications, cloud infrastructure, containers, and the SDLC.

The role blends application security, attacker mindset, and security automation, and requires reading source code with developers to build more secure systems. The ideal candidate has hands-on experience in application security, review of code for vulnerabilities, and strong