Application Security Developer

Kforce - Topeka, KS

Full-time

Topeka, KS

Administrative and Support Services

About the position

Kforce is seeking an Application Security Developer to enhance the security of applications within a large organization in Topeka, KS. This role focuses on securing APIs, maintaining and developing software solutions, and ensuring that security is integrated into application designs. The developer will conduct vulnerability assessments, promote secure coding practices, and assist in incident management and response, while also ensuring compliance with relevant regulations.

Responsibilities

• Secure APIs by collaborating with development teams using Azure API Management.
• Maintain existing security solutions and develop new software solutions for the organization.
• Partner with development teams to integrate security into application designs and provide secure design guidance.
• Conduct code reviews and penetration tests to identify vulnerabilities such as SQL injection, XSS, and CSRF.
• Promote and ensure adherence to secure coding practices by establishing coding standards and providing training.
• Develop and maintain threat models to identify potential risks and implement preventive security measures early in the development cycle.
• Assist in incident response, investigating security breaches, and providing recommendations for securing applications against similar threats in the future.
• Collaborate closely with software developers and DevOps to ensure alignment and execution of security best practices across the entire SDLC.
• Ensure applications meet compliance requirements such as HIPAA and participate in audits as necessary.
• Stay updated with the latest security trends, threats, and tools to proactively defend against evolving cyber risks.

Requirements

• High School diploma/GED or equivalent required.
• Bachelor's degree or completion of a Computer Science Program from a Technical Trade School preferred.
• 2+ years of experience in application development, with a thorough knowledge of at least one programming language (for intermediate or advanced level positions).
• Experience with C# .NET, Azure Isolated Functions and App Services, Blazor, and .NET 6 & 8 is a bonus.
• Extensive experience with RESTful APIs, Swagger, and Open API docs.
• Deep understanding of web application security vulnerabilities and their remediation (e.g., SQL injection, XSS, CSRF, etc.).
• Strong knowledge of secure coding practices in languages such as Java, C#, JavaScript, Vue, React, etc.
• Knowledge of Authorization and Authentication concepts such as SAML, OIDC, OAuth 2.0, and PKCE.
• Experience with securing APIs and understanding of Zero Trust security models and Identity & Access Management (IAM).
• Experience with OKTA and familiarity with cloud security (AWS, Azure, or GCP).

Benefits

• Medical, dental, and vision insurance
• Health Savings Account (HSA)
• Flexible Spending Account (FSA)
• 401(k) plan
• Life, disability, and Accidental Death & Dismemberment (ADD) insurance
• Paid time off for salaried personnel
• Paid sick leave for hourly employees on Service Contract Act projects