Tech Lead - Security Remediation Standards

RESPONSIBILITIES

Kforce has a client seeking a remote Tech Lead to join their team. We are seeking a Tech Lead to define and deliver the application security standards used across the BC2 remediation program within Data Engineering. This is a centralized role that translates InfoSec control requirements into executable engineering specifications, establishes hardened reference implementations for each application type in the estate, and validates remediation prior to production implementation.

Duties

• Translate InfoSec control requirements into scoped, assignable engineering work with defined acceptance criteria and audit evidence
• Create and maintain well-defined development tickets with clear requirements and measurable outcomes
• Classify the application estate into a small number of types, based on build and runtime characteristics, and maintain that classification as the estate changes
• Establish, or specify for others to build, the tooling, environments, and pipeline capability required to deliver and validate standards at scale
• Design, build, and maintain a hardened reference implementation for each type
• Define migration paths for end-of-life runtimes and frameworks and identify workloads where retirement or replacement is lower cost than remediation
• Analyze scan findings and exception requests to determine exploitability, identify false positives, and specify compensating controls where remediation is not viable
• Define acceptance criteria and rollback procedures with the accountable application owner prior to production implementation, escalating where ownership is unresolved
• Ensure remediation evidence is generated by the build rather than assembled manually
• Provide technical direction to remediation engineers executing against published standards
• Produce standards documentation, migration procedures, developer guidance, and remediation evidence

REQUIREMENTS:

• 10+ years of software engineering experience across the full development lifecycle, including Tech Lead roles
• Experience designing and operating CI/CD, build, or developer platform capability adopted at scale across multiple development teams
• Experience in Linux environments; Windows exposure preferred
• Experience delivering in regulated environments with audit and evidence obligations
• Experience in a shared-services or centralized delivery model supporting multiple application teams with competing priorities

Required Technical Experience:

• Track record driving adoption of engineering standards across teams outside direct reporting lines
• Container build systems, including base images, multi-stage builds, minimal and hardened images, and the runtime impacts of adoption
• Vulnerability management, including interpreting scanner findings, exploitability and reachability assessment, prioritization, compensating controls, and exception documentation
• Working proficiency in Java, .NET, and Python sufficient to specify and review code changes
• Test strategy for request-serving services and for batch and pipeline workloads, including output-correctness verification
• Cloud platform depth in AWS or Azure
• CI/CD tooling and pipeline automation, such as Jenkins, GitHub Actions, GitLab, or equivalent
• Infrastructure as code, such as Terraform, Ansible, or equivalent

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions. Kforce is an Equal Opportunity/Affirmative Action Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

You will always have the right to cease communicating via text by using key words such as STOP.