Application Security Engineer - SDLC & DevSecOps (Remote)

Kemper; United States; Remote; USD 94,000 - 156,000; Full time

Benefits offered by this job

Health and dental plans

401(k) match

Tuition assistance

Community involvement (United Way)

Paid time off

Casual dress

Employee discounts

Job summary

Kemper Insurance is hiring an Application Security Analyst to embed security into the software development lifecycle and perform credible application-security assessment across modern applications, APIs, cloud-native services, and software supply chains. The role partners directly with developers and architects to prevent, identify, validate, and remediate exploitable application risk.

The role also involves integrating security requirements into architecture and release processes, conducting

Qualifications

• Hands-on experience with application security testing, secure code review, and vulnerability validation.
• Strong knowledge of OWASP Top 10/API risks, authentication/authorization patterns, session management, cryptography fundamentals, input validation, and common web/application attack techniques.
• Understanding of SAST, DAST, SCA, API testing, secrets scanning, and CI/CD security tooling.

Responsibilities

• Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.
• Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing; distinguish exploitable weaknesses from tool noise.
• Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.
• Partner with developers to provide code-level or design-level remediation guidance and verify closure.
• Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement.

Skills

Application security testing

Secure code review

Vulnerability validation

OWASP Top 10/API risks

SAST/DAST/SCA

CI/CD security tooling

REST/GraphQL APIs

Cloud services

Education

BS Computer Science, Software Engineering, Cybersecurity, Information Technology, or related discipline

Job description

Kemper Insurance is hiring an Application Security Analyst to embed security into the software development lifecycle and perform credible application-security assessment across modern applications, APIs, cloud-native services, and software supply chains. The role partners directly with developers and architects to prevent, identify, validate, and remediate exploitable application risk.

The role also involves integrating security requirements into architecture and release processes, conducting