Offensive AppSec Specialist & Emulation

Cybersecurity Jobs; Bloomington (IL); Hybrid; USD 94,000 - 130,000; Full time

Benefits offered by this job

Insurance benefits

401(k) with company match

Short-Term Incentive plan

Job summary

COUNTRY Financial in Bloomington, IL is seeking an Offensive Application Security Analyst to strengthen its application security program and threat emulation efforts. The role spans assessment, testing, automation, and cross-team collaboration.

You will perform security assessments across web, API, mobile, and cloud, triage findings from SAST/DAST, guide remediation, and participate in threat modeling and CI/CD security improvements. A hybrid work arrangement in Bloomington is offered.

Qualifications

• 3+ years of relevant experience in application security or related field.
• Experience translating security findings into actionable remediation guidance.
• Ability to explain technical findings to non-technical audiences.
• Strong analytical and problem-solving abilities.
• Experience with threat modeling and architecture reviews.
• Familiarity with CI/CD security practices.

Responsibilities

• Perform security assessments of web, API, mobile and cloud apps.
• Triages findings from SAST, DAST, and dependency scans.
• Provide remediation guidance and secure coding recommendations to development teams.
• Participate in threat modeling and architecture reviews.
• Improve security automation within CI/CD pipelines.
• Assist with third-party penetration testing coordination.
• Conduct threat-informed testing using MITRE ATT&CK methodologies.
• Document findings and provide actionable recommendations.

Skills

Secure software development

Web application security

Security testing

Red team / purple team

Automation scripting

Cloud security

MITRE ATT&CK

Git & CI/CD

Communication & collaboration

Continuous learning

Tools

PowerShell

Python

Bash

Git

SAST

DAST

MITRE ATT&CK

OWASP Top 10

CI/CD

Security automation

Job description

COUNTRY Financial in Bloomington, IL is seeking an Offensive Application Security Analyst to strengthen its application security program and threat emulation efforts. The role spans assessment, testing, automation, and cross-team collaboration.

You will perform security assessments across web, API, mobile, and cloud, triage findings from SAST/DAST, guide remediation, and participate in threat modeling and CI/CD security improvements. A hybrid work arrangement in Bloomington is offered.