Senior Engineer / Application Security

Kforce Inc; Miami (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

Kforce Inc. is seeking a Senior Application Security Engineer in Doral, FL. This hands-on role focuses on implementing and maintaining security capabilities across software development, cloud infrastructure, and DevSecOps.

You will work with development and operations teams to identify vulnerabilities, automate governance, and integrate security controls into SDLC. Key duties include securing SAST/DAST processes, building automation scripts, managing Kubernetes clusters, and applying IaC

Qualifications

• Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar; 5+ years of professional experience
• Hands-on experience writing software applications, including APIs, web applications, and scripts
• Strong experience operating and administrating common security tools like SAST and DAST scanners
• Strong experience communicating security findings to teams and following through on remediation efforts
• Hands-on experience performing threat modeling and adversarial testing of software applications
• Hands-on experience with cloud-native application development and operations, including the use of CI/CD pipelines, cloud compute resources, and containerization (e.g. Docker and Kubernetes)

Responsibilities

• Engineer and administer Application Security tools and controls
• Assess vulnerabilities, security misconfigurations, and incidents
• Work with development teams to investigate vulnerabilities identified through SAST/DAST scanners and bug bounty programs
• Perform application and release security reviews
• Develop scripts and APIs that automate security governance
• Automate security processes and controls within the development lifecycle
• Build and maintain cloud infrastructure supporting AppSec services
• Develop and operate Kubernetes clusters
• Use Infrastructure as Code (IaC)
• Support security capabilities used by development teams across multiple brands
• Ensure applications comply with security policies, standards, and guidelines

Skills

Security engineering

Threat modeling

CI/CD pipelines

Cloud-native development

Communication of findings

Education

Bachelor's Degree in Computer Science or related

Tools

SAST

DAST

Kubernetes

Docker

IaC (Infrastructure as Code)

Job description

Responsibilities

Kforce has a client seeking for a Senior Application Security Engineer in Doral, FL. Summary: This is a hands-on security engineering role responsible for implementing and maintaining the company software security capabilities. The position combines application security, cloud infrastructure, DevSecOps, and security automation. A major part of the role is working directly with development and operations teams to identify software vulnerabilities, automate security governance, and make security controls easier to incorporate into software development processes. Key Responsibilities:

• Engineer and administer Application Security tools and controls
• Assess vulnerabilities, security misconfigurations, and incidents
• Work with development teams to investigate vulnerabilities identified through SAST/DAST scanners and bug bounty programs
• Perform application and release security reviews
• Develop scripts and APIs that automate security governance
• Automate security processes an controls within the development lifecycle
• Build and maintain cloud infrastructure supporting AppSec services
• Develop and operate Kubernetes clusters
• Use Infrastructure as Code (IaC)
• Support security capabilities used by development teams across multiple brands
• Ensure applications comply with security policies, standards, and guidelines

Responsibilities

Kforce has a client seeking for a Senior Application Security Engineer in Doral, FL. Summary: This is a hands-on security engineering role responsible for implementing and maintaining the company software security capabilities. The position combines application security, cloud infrastructure, DevSecOps, and security automation. A major part of the role is working directly with development and operations teams to identify software vulnerabilities, automate security governance, and make security controls easier to incorporate into software development processes. Key Responsibilities:

• Engineer and administer Application Security tools and controls
• Assess vulnerabilities, security misconfigurations, and incidents
• Work with development teams to investigate vulnerabilities identified through SAST/DAST scanners and bug bounty programs
• Perform application and release security reviews
• Develop scripts and APIs that automate security governance
• Automate security processes an controls within the development lifecycle
• Build and maintain cloud infrastructure supporting AppSec services
• Develop and operate Kubernetes clusters
• Use Infrastructure as Code (IaC)
• Support security capabilities used by development teams across multiple brands
• Ensure applications comply with security policies, standards, and guidelines

Requirements

• Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar; 5+ years of professional experience
• Hands-on experience writing software applications, including APIs, web applications, and scripts
• Strong experience operating and administrating common security tools like SAST and DAST scanners
• Strong experience communicating security findings to teams and following through on remediation efforts
• Hands-on experience performing threat modeling and adversarial testing of software applications
• Hands-on experience with cloud-native application development and operations, including the use of CI/CD pipelines, cloud compute resources, and containerization (e.g. Docker and Kubernetes)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.