KeyCorp

6 days ago

Application & Cloud Security Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Perform hands-on application security assessments and penetration testing for web apps, APIs, and services, and validate results from SAST, SCA, and DAST tools. Evaluate cloud environments on GCP, Azure, and AWS using CSPM to identify misconfigurations and exposure risks. Integrate security into CI/CD pipelines, triage vulnerabilities, assess open-source dependencies for supply-chain risk, and partner with developers and DevOps teams to remediate issues and improve secure coding.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Perform manual application security testing and penetration testing for web applications, APIs, and services.
•Review and triage findings from SAST, SCA, and DAST tools, reducing false positives.
•Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations.
•Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.
•Evaluate cloud environments using CSPM and integrate security into CI/CD pipelines for ongoing scanning and automation.

Pay and Benefits

Salary: USD 69,000 - 105,000 annually

Key Requirements

•Bachelor of Computer Science, Cybersecurity, or related field—or equivalent experience.
•4+ years of experience in application security, penetration testing, or secure software development.
•Hands-on experience with manual application security testing (web/API) plus SAST, SCA, and DAST tools and OWASP Top 10/API risks.
•Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).
•Strong programming/scripting and command-line proficiency (e.g., Python, Java, JavaScript, Bash, PowerShell; Linux/Unix) with CI/CD/DevSecOps familiarity.

Experience:4+ yearsApplication securityPenetration testingSecure software developmentDevSecOpsCloud-nativeCloud securityCI/CD

Education:Bachelor's in Computer Science, Cybersecurity, or related field

Skills:Execution-focusedCollaborationSecure coding practices

Certifications:GIAC Web Application Penetration Tester (GWAPT)Offensive Security Web Expert (OSWE)AWS security certificationsAzure security certificationsGCP security certifications

Tech Stack:SASTSCADASTCSPMGCPAzureAWSCI/CDDevSecOpsPythonJavaJavaScriptBashPowerShellLinux/UnixOWASP Top 10API securityBurp SuiteSnykKubernetes

Company Brief

KeyCorp

KeyCorp operates KeyBank, providing retail and commercial banking, lending, wealth management, and investment services to individuals, businesses, and institutions across the United States.

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Cleveland, United States

Founded: 1849

Glassdoor: 3.6

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

KeyCorp

6 days ago

Application & Cloud Security Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Perform manual application security testing and penetration testing for web applications, APIs, and services.
•Review and triage findings from SAST, SCA, and DAST tools, reducing false positives.
•Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations.
•Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.
•Evaluate cloud environments using CSPM and integrate security into CI/CD pipelines for ongoing scanning and automation.

Pay and Benefits

Salary: USD 69,000 - 105,000 annually

Key Requirements

•Bachelor of Computer Science, Cybersecurity, or related field—or equivalent experience.
•4+ years of experience in application security, penetration testing, or secure software development.
•Hands-on experience with manual application security testing (web/API) plus SAST, SCA, and DAST tools and OWASP Top 10/API risks.
•Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).
•Strong programming/scripting and command-line proficiency (e.g., Python, Java, JavaScript, Bash, PowerShell; Linux/Unix) with CI/CD/DevSecOps familiarity.

Experience:4+ yearsApplication securityPenetration testingSecure software developmentDevSecOpsCloud-nativeCloud securityCI/CD

Education:Bachelor's in Computer Science, Cybersecurity, or related field

Skills:Execution-focusedCollaborationSecure coding practices

Certifications:GIAC Web Application Penetration Tester (GWAPT)Offensive Security Web Expert (OSWE)AWS security certificationsAzure security certificationsGCP security certifications

Tech Stack:SASTSCADASTCSPMGCPAzureAWSCI/CDDevSecOpsPythonJavaJavaScriptBashPowerShellLinux/UnixOWASP Top 10API securityBurp SuiteSnykKubernetes

Company Brief

KeyCorp

KeyCorp operates KeyBank, providing retail and commercial banking, lending, wealth management, and investment services to individuals, businesses, and institutions across the United States.

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Cleveland, United States

Founded: 1849

Glassdoor: 3.6

Website LinkedIn