Node.js Developer

RESPONSIBILITIES:
Kforce has a client that is seeking a Node.js Developer in Chicago, IL.

Overview:
The security engineer designs, implements, and maintains systems and networks to protect an organization's data and infrastructure from cyber threats. Key duties include conducting vulnerability assessments, responding to security incidents, managing access controls, developing security policies, and staying current with emerging threats and technologies. The developer will also develop and deliver quality solutions using Node.js, HTTP, REST, NoSQL, and other web technologies. The candidate will work with minimum technical supervision and supplemental engineering support. They will also design and develop enhancements on new and existing applications using Node.js.

Key Responsibilities:
* Analyze and remediate vulnerabilities identified by Wiz and Veracode
* Review Java, Node.js, and SQL code to identify security weaknesses and implement secure coding standards
* Collaborate with developers to patch CVEs in dependencies and third-party libraries
* Apply cloud security best practices for AWS environments, including IAM policies, ECS roles, Lambda permissions, and S3 bucket configurations
* Document remediation steps, provide security guidance, and support continuous vulnerability management

REQUIREMENTS:
Node.js:
* 5+ experience with Node JS developing APIs (must have), and nice to have knowledge of python, and/or other scripting languages, express.js, next.js
* Experience fixing vulnerabilities in npm dependencies

* Proficient understanding of code versioning tools, such as Git/SVN
* Programming and Code Remediation

SQL:
* Understanding of SQL query optimization and prevention of injection vulnerabilities
* Familiarity with stored procedures and parameterized queries

Java (Spring Boot preferred):
* Understand common security flaws (SQL injection, XXE, deserialization, CSRF, etc.)
* Able to implement secure coding practices and patch CVEs in dependencies (Maven)

* Understanding AWS IAM policies, S3 bucket permissions, ECS task roles, and Lambda security
* Ability to interpret Wiz findings and apply least-privilege principles

CI/CD and DevSecOps:
* Experience integrating Veracode and Wiz scans into CI/CD pipelines (TeamCity, Jenkins, GitHub Actions, etc.)
* Familiarity with dependency management, artifact scanning, and pipeline gating practices

* Java programming experience is nice to have
* Cloud Security (AWS Preferred)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.