Senior Product Security Engineer — Secure SDLC & Cloud

Kforce Inc; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Kforce Inc. is seeking an experienced Application Security professional in New York to partner with software teams, conduct security testing, and guide remediation across the SDLC.

You will influence architecture, implement security controls, and integrate security into CI/CD pipelines. Responsibilities include threat modeling, security reviews, and delivering education to engineers while staying abreast of emerging threats.

Qualifications

• Bachelor's degree or higher in CS/IT/Cybersecurity or related field.
• 7+ years in Application Security or similar role.
• Experience partnering with software development teams.
• Hands-on security testing, remediation and assessments.
• Code reviews and secure development guidance.
• Familiarity with cloud security and DevSecOps.
• Experience securing CI/CD pipelines and development workflows.
• Knowledge of OWASP Top 10 and web vulnerabilities.
• Strong understanding of secure SDLC and modern web architectures.
• Excellent communication for technical and non-technical stakeholders.

Responsibilities

• Promote secure coding practices and security-by-design with engineering teams.
• Conduct application security assessments and testing.
• Identify vulnerabilities and guide remediation efforts.
• Perform code reviews and provide secure development recommendations.
• Help design and implement security controls for internal and customer apps.
• Integrate security tooling into CI/CD and workflows.
• Participate in threat modeling and security reviews.
• Develop and maintain security standards and policies.
• Support incident response for app/product security.
• Deliver security education for engineering teams.
• Stay updated on emerging threats and technologies.

Skills

App security testing

Vulnerability remediation

CI/CD security

Threat modeling

Security architecture

Cloud security

Secure SDLC

Security governance

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Tools

DevSecOps tooling

CI/CD tooling

Job description

Kforce Inc. is seeking an experienced Application Security professional in New York to partner with software teams, conduct security testing, and guide remediation across the SDLC.

You will influence architecture, implement security controls, and integrate security into CI/CD pipelines. Responsibilities include threat modeling, security reviews, and delivering education to engineers while staying abreast of emerging threats.