Offensive Application Security Analyst

COUNTRY Financial®; Bloomington (IL); On-site; USD 94,000 - 130,000; Full time

Benefits offered by this job

Short-Term Incentive plan

Job summary

COUNTRY Financial is seeking an Offensive Application Security Analyst to strengthen our application security program and participate in adversary emulation efforts. The role balances 50% application security testing and 50% threat emulation, collaborating with developers and security teams to reduce risk.

You will perform assessments across web, API, mobile, and cloud environments, triage findings from SAST/DAST, and contribute to secure coding guidance.

Qualifications

• Minimum 3 years of experience in application security or offensive security.
• Experience with SAST/DAST and secure SDLC practices.
• Familiarity with MITRE ATT&CK and threat emulation concepts.

Responsibilities

• Perform application security assessments against web, API, mobile, and cloud apps.
• Assist with threat emulation exercises and penetration testing coordination.
• Help improve secure development lifecycle practices.
• Collaborate with developers and incident responders to reduce cybersecurity risk.
• Document findings and provide actionable recommendations to improve detection and prevention.

Skills

Secure SDLC

OWASP Top 10

SAST/DAST

Red/Purple Team

Scripting (PowerShell Python Bash)

Cloud security concepts

MITRE ATT&CK

3+ years experience

Education

Bachelor's degree in CS or related

Tools

Git

CI/CD pipelines

Job description

Experience more with a career at COUNTRY Financial!

We’re excited you’re interested in a career at COUNTRY as we strive toward our vision - to enrich lives in the communities we serve. Our footprint spans coast to coast. But more important than where we operate, is the people who do the work.

About The Role

The Offensive Application Security Analyst helps improve the security of COUNTRY Financial's applications and technology platforms through a blend of application security assessment and adversary emulation activities. This role spends approximately 50% of time supporting the Application Security program and 50% supporting Threat Intelligence & Emulation initiatives.

The individual will perform application security testing, assist with secure development practices, support penetration testing activities, participate in threat emulation exercises, and help validate the effectiveness of enterprise security controls. This role serves as a technical contributor who works closely with developers, infrastructure teams, incident responders, and other security professionals to identify and reduce cybersecurity risk. The position supports both secure software development and offensive security objectives.

Primary Responsibilities

Application Security (50%)

• Perform application security assessments against web, API, mobile, and cloud applications.


• Analyze and triage findings from SAST, DAST, dependency scanning, and other security testing platforms.


• Assist development teams with vulnerability remediation guidance and secure coding recommendations.


• Participate in threat modeling and architecture review activities.


• Help improve application security automation and security testing within CI/CD pipelines.


• Support dependency management and software supply chain security initiatives.


• Collaborate with technology teams to improve secure development lifecycle practices.


• Demonstrate an understanding of Git and Git-based development workflows, including branching, pull requests, code reviews, and secure code management practices

Threat Emulation (50%)

• Execute red team, purple team, and adversary emulation activities under established rules of engagement.


• Assist with internal penetration testing exercises and third-party penetration testing coordination.


• Conduct security control validation and threat-informed testing using MITRE ATT&CK methodologies.


• Research adversary tactics, techniques, and procedures and help translate intelligence into testing scenarios.


• Perform offensive security assessments against enterprise infrastructure, cloud environments, and applications.


• Document findings and provide actionable recommendations to improve detection and prevention capabilities.


• Partner with defensive security teams to validate response and monitoring effectiveness.

How does this role make an impact?

• Participates in projects and assessments on risk. - Analyzes and defines security policies and standards. - Monitors, alerts and responds to security events. - Performs computer forensic and investigative activities; and penetration and vulnerability testing. - Defines and administers identity & access roles and workflows.

Do you have what we're looking for?

Required Skills

Technical Knowledge

• Secure software development principles and common application vulnerabilities.


• Web application security concepts including OWASP Top 10.


• Security testing methodologies including SAST, DAST, and penetration testing.


• Basic understanding of red team and purple team methodologies.


• Scripting and automation experience using PowerShell, Python, Bash, or similar languages.


• Knowledge of cloud security concepts and modern application architectures.


• Familiarity with MITRE ATT&CK Framework concepts.


• Typically requires 3+ years of relevant experience or a combination of related experience, education and training.

Professional Skills

• Strong analytical and problem-solving abilities.


• Effective written and verbal communication.


• Ability to explain technical findings to both technical and non-technical audiences.


• Strong collaboration and teamwork skills.


• Self-motivated with a desire to continuously learn and develop offensive and application security expertise.

Base Pay Range

$94,400-$129,800

Incentive Pay

In addition to base salary, this position is eligible for a Short-Term Incentive plan.

Why work with us?

Our employees and representatives serve nearly one million households with our diverse range of personal and business insurance products as well as retirement and investment services. We build relationships and work together to create a stronger, more secure future for our clients and our communities. We’re a big company, yet small enough you can make an impact and won’t get lost in the shuffle. You’ll have the opportunity to learn and grow throughout your career, either within this role or by exploring other areas of our business.

• You’ll be able to take advantage of our benefits package, which includes insurance benefits (medical, dental, vision, disability, and life), 401(k) with company match.

COUNTRY Financial is committed to providing equal opportunity in all areas of employment, and in providing employees with a work environment free of discrimination and harassment. Employment decisions are made without regard to race, color, religion, age, gender, sexual orientation, veteran status, national origin, disability, or any other status protected by applicable laws or regulations.