About the position
Kforce has a client that is seeking a Product Security Engineer in Boca Raton, FL. The role involves implementing cybersecurity measures, integrating security into DevOps processes, and ensuring secure software development life cycle (SDLC) practices.
Responsibilities
- Develop and maintain cybersecurity policies and procedures
- Conduct risk assessments and vulnerability analyses to identify potential security threats
- Lead incident response activities and investigate security incidents
- Collaborate with DevOps teams to integrate security best practices into software development workflows
- Implement automated security testing and continuous monitoring solutions
- Advocate for secure coding practices, configuration management, and infrastructure as code
- Design and implement secure SDLC frameworks
- Enforce governance policies to ensure compliance with industry standards and regulations
- Perform regular security reviews and audits of the SDLC processes and tools
- Stay current with emerging cybersecurity threats, technologies, and best practices
- Participate in security architecture reviews and threat modeling exercises
- Provide technical guidance and support to other team members
- Work closely with cross-functional teams, including IT, development, and business units, to support security initiatives
- Communicate complex security concepts and recommendations to both technical and non-technical stakeholders
- Develop and deliver cybersecurity training and awareness programs for employees
Requirements
- Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience)
- 3-5 years of experience in cybersecurity, with exposure to DevOps and SDLC practices
- Strong understanding of cybersecurity principles, practices, and technologies
- Experience with DevOps tools and practices, including CI/CD pipelines and cloud platforms
- Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment
- Strong communication and interpersonal skills, with the ability to collaborate effectively with diverse teams
Nice-to-haves
- Relevant certifications such as CISSP, Security+, CEH, or equivalent are highly desirable
- Experience with cloud security, particularly in AWS, Azure, or Google Cloud environments
- Knowledge of compliance standards such as ISO 27001, NIST, GDPR, and HIPAA
- Familiarity with automated security testing tools and techniques
- Experience with threat intelligence and threat hunting
