> Markdown version of [/jobs/ext/2279591-net-appsec-engineer-remote](https://www.wearedevelopers.com/jobs/ext/2279591-net-appsec-engineer-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# NET AppSec Engineer (Remote)

- **Company:** Kforce Inc.
- **Location:** Birmingham, AL, United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** .NET Framework, Application Programming Interfaces (APIs), Amazon Web Services, User Authentication, Continuous Integration, Github, Key Management, OpenShift, Open Web Application Security, Systems Development Life Cycle, Secure Coding, Web Applications, ReactJS, Software Security, AngularJS, Kubernetes, Hashicorp, Api Gateway, Restful APIs, Api Management, Mulesoft, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** August 28, 2026
- **Apply:** https://www.kforce.com/find-work/search-jobs/#/detail/MTY5Nn5XUUd-MjE4NjcwOFQxfjk5/

## About the Role

* Strong experience building and securing REST APIs
 * Demonstrated experience with API security, including authentication and authorization
 * Experience with MuleSoft or a similar API management, API gateway, or integration platform
 * Experience identifying and remediating application or API security vulnerabilities
 * Strong understanding of secure coding practices and the Secure SDLC
 * Familiarity with OWASP principles and common application security vulnerabilities
 * Experience working with security findings from SAST, DAST, SCA, or similar tools
 * Experience with GitHub, GitHub Actions, and modern CI/CD practices
 * Ability to work directly within existing codebases and make hands-on remediation changes

Preferred:

 * MuleSoft experience highly preferred
 * Experience with JWT validation and modern authentication and authorization frameworks
 * Experience with API governance and API security standards
 * React development experience
 * Experience with GitHub Advanced Security and Dependabot
 * Experience with secrets management technologies such as HashiCorp Vault
 * Experience with Aqua Security or similar container and application security tools.

AWS, OpenShift, or Kubernetes experience

 * Microservices and application modernization experience
 * Experience in banking, financial services, or another highly regulated industry
 * Experience working in environments with significant security and compliance requirements

We are looking for a software engineer first, rather than someone who has worked exclusively in a security or governance role. The ideal candidate has a strong background building applications with .NET and Angular and has expanded their expertise into application and API security.

## Description

Kforce's client in Birmingham, AL is seeking an experienced Software Engineer with a strong .NET and Angular development background and hands-on experience securing APIs and modern web applications. This is a hands-on engineering role focused on helping multiple application teams remediate security vulnerabilities, improve API security, and modernize secure development practices. The ideal candidate understands how applications and APIs are built and can work directly within existing codebases to identify and resolve security issues. Experience with MuleSoft or a similar API management, integration, or gateway platform is required. MuleSoft experience is highly preferred. Responsibilities:

 * Work directly within .NET and Angular applications to remediate security vulnerabilities and improve application security
 * Design, develop, and secure REST APIs
 * Improve API authentication, authorization, and security controls
 * Identify and remediate security vulnerabilities in existing applications and codebases
 * Apply secure coding practices and Secure SDLC principles
 * Support remediation efforts across multiple applications and development teams
 * Work with security findings from SAST, DAST, SCA, and similar application security tools
 * Help improve API standards, governance, and security compliance
 * Support secure CI/CD and development practices using GitHub and GitHub Actions
 * Work across both legacy and modern applications and quickly adapt to new teams and environments


## Related Videos

- [Why make use of an integration platform in today's software developments and infrastructure?](https://www.wearedevelopers.com/videos/758-why-make-use-of-an-integration-platform-in-today-s-software-developments-and-infrastructure)
- [Watch Tests Go Brrrr! : Getting Started with Cypress in ReactJS](https://www.wearedevelopers.com/videos/282-watch-tests-go-brrrr-getting-started-with-cypress-in-reactjs)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)