IT Security Engineer

RESPONSIBILITIES:
Kforce has a client in Jacksonville, FL that is seeking an experienced and hands-on Senior Information Security Engineer to lead vulnerability management, cloud security governance, and compliance-driven security control design across our AWS-based infrastructure. This role goes beyond operational security monitoring. The ideal candidate must be capable of performing gap assessments against financial institution and regulatory requirements (including PCI-DSS), designing practical security control solutions, and working closely with system engineers to implement and validate those controls. This individual will serve as the primary security owner for customer security reviews and external PCI-DSS audits.

Key Responsibilities:
Vulnerability Management:
* Own and manage the end-to-end vulnerability management lifecycle
* Perform risk-based vulnerability triage using CVSS and business context
* Define remediation priorities and enforce SLA adherence
* Manage exception processes and risk acceptance documentation
* Conduct weekly vulnerability review meetings
* Deliver executive-level vulnerability reporting and trend analysis

Security Control Design & Implementation:
* Perform security gap assessments against: PCI-DSS requirements; Customer contractual security requirements; Internal security policies
* Design practical and scalable security control solutions when gaps are identified
* Translate compliance requirements into technical implementation plans
* Develop remediation roadmaps with clear milestones
* Work directly with system engineers to implement security controls
* Validate and formally accept implemented controls
* Ensure evidence collection meets audit standards

AWS Cloud Security Governance:
* Define and maintain AWS security baselines
* Continuously assess cloud security posture
* Identify misconfigurations and reduce attack surface
* Review public exposure risks
* Strengthen identity and access management controls

REQUIREMENTS:
* 5+ years of experience in Information Security or Cloud Security
* Strong hands-on AWS security experience
* Proven experience supporting PCI-DSS audits
* Experience designing and implementing security controls
* Experience performing gap assessments against regulatory standards
* Deep understanding of vulnerability management processes
* Strong knowledge of IAM, network security, encryption, and logging
* Ability to independently lead audit discussions
* Strong documentation and cross-team coordination skills

Preferred Qualifications (Nice to Have):
* CISSP, CISM, or equivalent certifications
* Experience securing on-premise infrastructure environments
* Familiarity with hybrid cloud/on-prem security architectures
* AWS Security Specialty certification
* Experience in SOC 2 or ISO 27001 environments
* Ability to communicate in Mandarin Chinese (to collaborate with China-based
development teams)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.