Application Security Risk & Automation SME
kforceSan Antonio, TX
Application Security Risk & Automation SME
kforceSan Antonio, TX
APPLY NOW (opens in a new tab)14 days ago
About the role
Description:
Kforce has a client that is seeking an Application Security Risk & Automation SME in San Antonio, TX.
Summary:
We are seeking an Application Security Risk & Automation Subject Matter Expert (SME) to support the automation and operationalization of Secure SDLC practices. This role will focus on improving application security processes, reducing developer friction, enhancing risk-based vulnerability management, and driving adoption of AI-assisted security workflows within a modern DevSecOps environment.
Key Responsibilities:
- Support the implementation and continuous improvement of Secure SDLC automation and application security operations* Reduce developer friction through vulnerability validation, risk-based prioritization, and false-positive reduction* Configure and maintain GitLab security controls, approval workflows, merge request (MR) security policies, and enforcement gates* Implement and support AI-assisted triage, remediation recommendations, and automated findings management solutions* Develop and maintain automation for vulnerability enrichment, correlation, routing, deduplication, and reporting* Partner with development teams to improve remediation outcomes and increase adoption of secure development practices* Support onboarding, integration, and operationalization of new application security tools and capabilities* Collaborate with security, engineering, and DevOps teams to strengthen security controls throughout the software development lifecycleRequirements* 5+ years of experience in Application Security, DevSecOps, Security Engineering, or a related cybersecurity discipline* Hands-on experience with security testing technologies including SAST, DAST, Software Composition Analysis (SCA), Container Security, and Secrets Detection* Experience configuring GitLab security capabilities, approval workflows, policy enforcement, and secure development controls* Experience integrating security tools with GitLab, ServiceNow, Jira, and enterprise reporting platforms* Strong knowledge of application security concepts and the OWASP Top 10* Understanding of software supply chain security, dependency management, and secure coding practices* Proficiency with APIs, scripting, automation technologies, and AI-enabled workflows* Strong analytical, problem-solving, and communication skills with the ability to collaborate effectively across technical teamsPreferred Qualifications:* Relevant security certifications such as CSSLP, GSEC, Security+, CISSP, or comparable credentials* Experience implementing security automation at scale within cloud-native or enterprise environments* Experience driving process improvements that enhance developer experience while maintaining security standards* Knowledge of CI/CD pipelines and modern DevSecOps practicesJob TypeContractCompensation80 - $95
Matching similar jobs
JOB OVERVIEW
Experience level
Lead
Location
San Antonio, TX
Occupation
Software Developers
Industry
Custom Computer Programming Services
Posted
14 days ago
Tired of running searches?
Rank the roles you'd take once, and matches like these arrive on their own.
CREATE PROFILE (opens in a new tab)