Cybersecurity Engineer

Kforce has a client in Birmingham, AL that is seeking a Cybersecurity Engineer to join a team responsible for securing large-scale, public-facing web applications and infrastructure within a complex hybrid environment spanning both on-premises data centers and AWS cloud platforms. Summary: This role will focus heavily on web application security, API security, infrastructure security, and Infrastructure as Code (IaC). The ideal candidate will bring a strong blend of cybersecurity, cloud engineering, and infrastructure automation experience, with the ability to support and enhance security controls across a modern enterprise environment. The team is responsible for protecting customer-facing applications and services, ensuring secure operations, continuous infrastructure improvements, and proactive vulnerability management. Key Responsibilities:

• Design, implement, and maintain Web Application Firewall (WAF) solutions to protect public-facing applications
• Build and manage API security controls and related security technologies
• Develop, deploy, and maintain infrastructure across both AWS and on-premises environments
• Manage infrastructure using Infrastructure as Code (IaC) methodologies and best practices
• Perform ongoing vulnerability identification, remediation, patching, and infrastructure upgrades
• Support the secure design, deployment, and operation of multi-tier application architectures
• Collaborate with engineering, infrastructure, and security teams to improve security posture and operational efficiency
• Contribute to automation initiatives that improve consistency, scalability, and security across environments
• Participate in Agile processes and support the team's ongoing Agile transformation
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
• Strong experience with AWS cloud infrastructure
• Hands-on experience with Terraform and Infrastructure as Code practices
• Strong Python development and automation skills
• Experience supporting and securing web applications and public-facing infrastructure
• Knowledge of vulnerability management, remediation, and infrastructure hardening practices

Preferred Qualifications:

• Networking and network security experience
• Experience with CI/CD pipelines and DevSecOps practices
• Software development background
• Experience with web application security technologies and API security platforms
• Familiarity with hybrid cloud and on-premises infrastructure environments

Desired Soft Skills:

• Strong collaboration and communication skills
• Proven ability to work effectively in cross-functional teams
• Team-oriented mindset with a willingness to share knowledge and mentor others
• Comfortable working in a fast-paced, evolving Agile environment
• Strong problem-solving and analytical abilities

This is an excellent opportunity for a senior cybersecurity professional who enjoys combining cloud engineering, infrastructure automation, and application security to protect critical enterprise systems and customer-facing applications.