Application Security Analyst

Kemper Corporation; Alabama; Hybrid; USD 94,000 - 156,000; Full time

Job summary

Kemper Corporation is seeking an Application Security Analyst in Alabama to embed security into the software development lifecycle and conduct credible assessments across modern applications, APIs, cloud-native services, and software supply chains.

You will partner with developers and architects to prevent, identify, validate, and remediate exploitable application risks, while building CI/CD security controls and promoting secure coding standards across engineering teams.

Qualifications

• Hands-on experience with application security testing, secure code review, and vulnerability validation.

Responsibilities

• Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.
• Perform and validate SAST, DAST, SCA, API testing, and manual security testing; distinguish exploitable weaknesses from tool noise.
• Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.
• Partner with developers to provide remediation guidance and verify closure.
• Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement.
• Use risk, exploitability, asset criticality, and business context to prioritize vulnerabilities and security debt.
• Analyze recurring defect patterns and drive preventive control improvements across engineering teams.

Skills

Application security testing

Secure code review

Vulnerability validation

OWASP Top 10

SAST

DAST

SCA

Threat modeling

Architecture review

REST/GraphQL APIs

Education

BS in Computer Science/Software Engineering/Cybersecurity/IT or related

Tools

SAST tools

DAST tools

SCA tools

Secrets scanning

CI/CD pipelines

Job description

*Kemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs. By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.*Kemper Insurance is hiring an **Application Security Analyst.** The Application Security Analyst is one who embeds security into the software development lifecycle and performs technically credible application-security assessment across modern applications, APIs, cloud-native services, and software supply chains. The role partners directly with developers and architects to prevent, identify, validate, and remediate exploitable application risk. **Key Responsibilities*** Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.* Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing; distinguish exploitable weaknesses from tool noise.* Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.* Partner with developers to provide code-level or design-level remediation guidance and verify closure.* Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement.* Use risk, exploitability, asset criticality, and business context to prioritize application vulnerabilities and security debt.* Analyze recurring defect patterns and drive preventive control improvements across engineering teams.**Qualifications*** Hands-on experience with application security testing, secure code review, and vulnerability validation.* Strong knowledge of OWASP Top 10/API risks, authentication/authorization patterns, session management, cryptography fundamentals, input validation, and common web/application attack techniques.* Working knowledge of SAST, DAST, SCA, API testing, secrets scanning, and CI/CD security tooling.* Understanding of modern software architectures, REST/GraphQL APIs, containers, cloud services, and software supply-chain dependencies.* Ability to engage developers at a technical level and provide actionable remediation guidance.* Applied secure SDLC, threat modeling, architecture review, risk-based exception, and application-risk prioritization experience.* Ability to translate exploitability into business impact and risk treatment decisions.* Understanding of security-control objectives for application development and deployment.* BS Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related discipline, or equivalent relevant professional experience. *The range for this position is 93,500-155,500. When determining candidate offers, we consider experience, skills, education, certifications, and geographic location among other factors. This job is also eligible for our Kemper benefits package (Medical, Dental, Vision, PTO, 401K, etc.)*