Responsibilities

Kforce is seeking a dynamic and experienced Senior Manager of Application Security to lead a high-performing team of application security engineers in Atlanta, GA. This role is critical to the security and integrity of Kforce's global suite of custom-built and third-party applications. The Senior Manager of Application Security will be responsible for ensuring secure development practices, overseeing dynamic application testing, managing web application firewalls, and establishing modern security standards for APIs and software development across the enterprise. Summary: As a hands-on leader, you will embed security throughout the software development lifecycle and partner closely with engineering teams to align security initiatives with business and technical goals. You will lead the charge in protecting Kforce's platforms from evolving threats-safeguarding both enterprise and customer-facing solutions. This role reports directly to the Director of Cybersecurity Software Engineering. Key Responsibilities:

Lead and mentor a team of application security engineers focused on identifying and mitigating vulnerabilities across internal and external applications
Develop and enforce secure coding practices and risk-based controls integrated into development workflows and DevSecOps pipelines
Oversee the configuration, tuning, and management of Web Application Firewalls (WAF) protecting public-facing web assets
Direct manual and automated application security testing efforts, including oversight of third-party penetration testing providers
Manage the responsible disclosure process, coordinating communication with external researchers to validate and remediate vulnerabilities
Collaborate with cross-functional teams, ensuring security policies and procedures are effectively applied across platforms and services
Participate in cybersecurity incident response activities and post-mortem reviews to enhance detection and prevention capabilities

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
8+ years of professional experience, with at least 6 years in cybersecurity and 3 years in a formal leadership capacity
Strong hands-on expertise in secure software development, static and dynamic code analysis, WAF management, and API security
Proficiency in Python, with additional experience in languages such as Java, JavaScript (React/Node), C#, Go, or PHP
Proven experience building and implementing secure coding standards and influencing architectural decisions across engineering teams
Strong communication and collaboration skills, with the ability to clearly explain complex security topics to technical and executive stakeholders
Demonstrated ability to lead teams, manage priorities, and deliver in fast-paced enterprise environments

Preferred Qualifications

Industry certifications including CISSP, CISM, CEH, OSCP, AWS/Azure certifications are a plus
Experience securing applications in large-scale, multi-cloud environments (AWS, Azure, or GCP)
Familiarity with the AWS Well-Architected Framework and secure cloud architecture design
In-depth knowledge of IAM, cryptography, secrets management, OAuth, SAML, and modern access control protocols
Experience with Agile, DevSecOps practices, and containerized deployments (e.g., Kubernetes, ECS, EKS, Lambda)
Hands-on knowledge of network security concepts and security technologies like firewalls, edge services, and DMZ architectures
Exposure to regulated industries (e.g., finance, healthcare, telecommunications, defense) and compliance frameworks such as NIST, ISO 27001, GDPR, FFIEC, or GLBA
Background in consulting (Big Four) or large-scale enterprise environments is highly desirable

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

Kforce Inc

New Jobs

Senior Manager of Application Security