Remote App & Cloud Security Engineer

KeyBank; Ohio; Hybrid; USD 69,000 - 105,000; Full time

Job summary

KeyBank's Cyber Application & Cloud Defense team is seeking an experienced Applications & Cloud Security Specialist to configure and optimize automated DAST and API scanning within CI/CD pipelines, helping secure software delivery and resilient cloud environments.

You will collaborate with development, DevOps, and cloud engineers to embed security into pipelines, perform manual testing alongside SAST/SCA tools, and apply CSPM best practices.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 4+ years of experience in application security, penetration testing, or secure software development.
• Hands-on with manual app security testing (web/API), SAST, SCA, DAST.
• Experience with at least one cloud platform (GCP, Azure, or AWS).
• Strong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar).
• Proficiency in Linux/Unix command-line environments.
• Familiarity with CI/CD pipelines and DevSecOps.
• Experience or comfort using AI-enabled tools for code analysis or testing.

Responsibilities

• Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems.
• Validate and tune API and DAST scan configurations to improve coverage.
• Perform manual application security testing and penetration testing of web apps, APIs, and services.
• Review findings from SAST, SCA, and DAST tools; triage and reduce false positives.
• Conduct API security and dynamic testing to identify vulnerabilities.
• Assess open-source dependencies for vulnerabilities and supply chain risk.
• Evaluate cloud environments (GCP, Azure, AWS) for misconfigurations, excessive permissions, and exposure risks.
• Implement and maintain CI/CD security integrations and automation workflows.
• Develop scripts and CLI tooling to support scalable security testing.
• Partner with development teams to remediate vulnerabilities and improve secure coding.
• Participate in architecture reviews with actionable security recommendations.
• Utilize AI tools to enhance productivity while maintaining secure usage.

Skills

Application security

Penetration testing

CI/CD security practices

Scripting (Python/Java/JS)

DevSecOps familiarity

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

SAST tools

SCA tools

DAST tools

Burp Suite

API security tools

Job description

KeyBank's Cyber Application & Cloud Defense team is seeking an experienced Applications & Cloud Security Specialist to configure and optimize automated DAST and API scanning within CI/CD pipelines, helping secure software delivery and resilient cloud environments.

You will collaborate with development, DevOps, and cloud engineers to embed security into pipelines, perform manual testing alongside SAST/SCA tools, and apply CSPM best practices.