Hybrid Offensive AppSec Analyst | Threat Emulation

Country Financial Group; Bloomington (IL); Hybrid; USD 94,000 - 130,000; Full time

Job summary

COUNTRY Financial in Bloomington, IL is seeking an Offensive Application Security Analyst to strengthen security across applications and platforms. The role blends application security testing and adversary emulation, with responsibilities split 50/50 between security testing and threat emulation activities.

You will perform assessments on web, API, mobile, and cloud apps, triage findings, and help developers remediate vulnerabilities while advancing secure coding practices within CI/CD

Qualifications

• Secure software development principles and common application vulnerabilities.
• Web application security concepts including OWASP Top 10.
• Security testing methodologies including SAST, DAST, and penetration testing.
• Basic understanding of red team and purple team methodologies.
• Scripting and automation using PowerShell or Python.
• Knowledge of cloud security concepts and modern application architectures.
• Familiarity with MITRE ATT&CK Framework concepts.
• Typically requires 3+ years of relevant experience or a combination of related experience, education and training.

Responsibilities

• Perform application security assessments against web, API, mobile, and cloud applications.
• Analyze and triage findings from SAST, DAST, dependency scanning, and other security testing platforms.
• Assist development teams with vulnerability remediation guidance and secure coding recommendations.
• Participate in threat modeling and architecture review activities.
• Help improve application security automation and security testing within CI/CD pipelines.
• Support dependency management and software supply chain security initiatives.
• Collaborate with technology teams to improve secure development lifecycle practices.
• Demonstrate an understanding of Git and Git-based development workflows, including branching, pull requests, code reviews, and secure code management practices.

Skills

OWASP Top 10

SAST/DAST

CI/CD security

MITRE ATT&CK

PowerShell/Python

Cloud security

Git workflows

Red team basics

Job description

COUNTRY Financial in Bloomington, IL is seeking an Offensive Application Security Analyst to strengthen security across applications and platforms. The role blends application security testing and adversary emulation, with responsibilities split 50/50 between security testing and threat emulation activities.

You will perform assessments on web, API, mobile, and cloud apps, triage findings, and help developers remediate vulnerabilities while advancing secure coding practices within CI/CD