Application & Cloud Security Specialist

Job not on LinkedIn

🔥 0 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $69k - $105k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

KeyBank

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1994

🏦 Banking

💸 Finance

💳 Fintech

Banking • Finance • Fintech

KeyBank is a full-service bank offering a wide range of financial services for individuals, small businesses, and large institutions. Services include personal and business banking, wealth management, loans, credit lines, mortgages, credit cards, and investment services. KeyBank also provides online and mobile banking tools to help customers manage their finances efficiently. With a focus on financial wellness, KeyBank offers resources to help customers understand banking basics, manage debts, and achieve their financial goals.

📋 Description

• Perform manual application security testing and penetration testing of web applications, APIs, and services. • Review and validate findings from SAST, SCA, and DAST tools, including triage and false positive reduction. • Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations. • Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk. • Evaluate cloud environments (GCP, Azure, AWS) for misconfigurations, excessive permissions, and exposure risks in support of the CSPM program. • Implement and maintain CI/CD security integrations, including scanning tools and automation workflows. • Develop scripts and CLI-based tooling to support scalable security testing and validation activities. • Partner with development teams to remediate vulnerabilities and improve secure coding practices. • Participate in architecture and design reviews, providing actionable security recommendations. • Utilize AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency while maintaining secure and responsible usage practices. • Track and report vulnerabilities, remediation progress, and security metrics.

🎯 Requirements

• Bachelor of Computer Science, Cybersecurity, or related field—or equivalent experience. • 4+ years of experience in application security, penetration testing, or secure software development. • Hands-on experience with: Manual application security testing (web/API), SAST, SCA, DAST tools • Common vulnerabilities (OWASP Top 10, API risks) • Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS). • Strong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar). • Proficiency working in command-line environments (Linux/Unix). • Familiarity with CI/CD pipelines and DevSecOps practices. • Experience or comfort using AI-enabled tools and coding assistants (e.g., for code analysis, automation, or testing support).

🏖️ Benefits

• Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives. • Health insurance • 401(k) matching • Flexible work hours