Offensive App Security & Threat Emulation Analyst

CCSI CC Services, Inc.; United States; Hybrid; USD 94,000 - 130,000; Full time

Benefits offered by this job

Insurance benefits

401(k) with company match

Paid time off

Parental leave

Tuition assistance

Employee resource groups

Job summary

COUNTRY Financial is seeking an Offensive Application Security Analyst to strengthen our applications and platforms. You will split time between application security assessments and adversary emulation, collaborating with developers, ops, and incident responders to reduce cyber risk.

Responsibilities include testing web/API/mobile/cloud apps, triaging findings, and enabling secure coding practices. You will emulate adversaries, validate controls, and guide security improvements across teams.

Qualifications

• 3+ years of relevant experience or a combination of related experience, education and training.

Responsibilities

• Perform application security assessments against web, API, mobile, and cloud apps.
• Analyze and triage findings from SAST, DAST, dependency scanning and other security testing platforms.
• Assist development teams with remediation guidance and secure coding recommendations.
• Participate in threat modeling and architecture review activities.
• Help improve security automation and CI/CD testing within pipelines.
• Support software supply chain security initiatives.

Skills

Secure software development

OWASP Top 10

SAST/DAST

Penetration testing

Red team

Purple team

Scripting (PowerShell, Python, Bash)

Cloud security

MITRE ATT&CK

Security automation

Job description

COUNTRY Financial is seeking an Offensive Application Security Analyst to strengthen our applications and platforms. You will split time between application security assessments and adversary emulation, collaborating with developers, ops, and incident responders to reduce cyber risk.

Responsibilities include testing web/API/mobile/cloud apps, triaging findings, and enabling secure coding practices. You will emulate adversaries, validate controls, and guide security improvements across teams.