Overview
Remote
On Site
$150,000 - $160,000 annually
Full Time
Skills
Software security
Organizational architecture
Web applications
Software development
Information security
Risk management
Risk assessment
Intellectual property
Resource allocation
Manual testing
Testing
Policies
Management
Training
Reporting
Accountability
Evaluation
Data
Metrics
Job Details
RESPONSIBILITIES:
Kforce has a client in Dallas, TX that is seeking a Senior Security Engineer.
Responsibilities:
* Develop, implement, and monitor a strategic, comprehensive application security program to ensure that the integrity, confidentiality, and availability of information is owned, controlled, or processed by the organization
* Design, develop, and implement security solutions, with an emphasis on web applications
* Develop and maintain secure coding practices for our applications and ensure source code testing best practices and remediation
* Work with development teams to integrate security measures into the software development lifecycle
* Develop, maintain, and publish up-to-date information security policies, standards, and guidelines; Oversee the approval, training, and dissemination of security policies and practices
* Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users
* Provide regular reporting on the status of the application security program to Management as part of a strategic risk management program
* Create a framework for roles and responsibilities regarding information ownership, classification, accountability and protection
* Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls
* Define and facilitate the application security risk assessment process, including the reporting and oversight of treatment efforts to address findings
* Manage security incidents and events to protect corporate IT assets, including intellectual property, sensitive data, and the company's reputation
* Monitor the external threat environment for emerging threats and advise Management on the appropriate courses of action
* Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the security
REQUIREMENTS:
* Bachelor's degree in Information Security, Computer Science, Management Information Systems, or related field required
* Minimum of 5 to10 years of experience in a combination of application security, risk management, and IT jobs; Employment history must demonstrate increasing levels of responsibility
* Prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
Kforce has a client in Dallas, TX that is seeking a Senior Security Engineer.
Responsibilities:
* Develop, implement, and monitor a strategic, comprehensive application security program to ensure that the integrity, confidentiality, and availability of information is owned, controlled, or processed by the organization
* Design, develop, and implement security solutions, with an emphasis on web applications
* Develop and maintain secure coding practices for our applications and ensure source code testing best practices and remediation
* Work with development teams to integrate security measures into the software development lifecycle
* Develop, maintain, and publish up-to-date information security policies, standards, and guidelines; Oversee the approval, training, and dissemination of security policies and practices
* Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users
* Provide regular reporting on the status of the application security program to Management as part of a strategic risk management program
* Create a framework for roles and responsibilities regarding information ownership, classification, accountability and protection
* Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls
* Define and facilitate the application security risk assessment process, including the reporting and oversight of treatment efforts to address findings
* Manage security incidents and events to protect corporate IT assets, including intellectual property, sensitive data, and the company's reputation
* Monitor the external threat environment for emerging threats and advise Management on the appropriate courses of action
* Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the security
REQUIREMENTS:
* Bachelor's degree in Information Security, Computer Science, Management Information Systems, or related field required
* Minimum of 5 to10 years of experience in a combination of application security, risk management, and IT jobs; Employment history must demonstrate increasing levels of responsibility
* Prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.