Remote Application & Cloud Security Specialist

KeyBank; Brooklyn (OH); Hybrid; USD 69,000 - 105,000; Full time

Job summary

KeyBank seeks an experienced Applications & Cloud Defense Specialist in Brooklyn, OH, to configure DAST and API scans within CI/CD pipelines and perform both automated and manual security testing across web apps, APIs, and cloud environments.

You will collaborate with development, DevOps, and cloud teams to embed security into pipelines, review findings, and drive secure coding practices, leveraging AI-enabled tooling where appropriate.

Qualifications

• Bachelor's degree in Computer Science or Cybersecurity, or equivalent experience.
• 4+ years of application security, penetration testing, or secure software development.
• Experience with SAST, SCA, DAST tools and manual testing of web APIs.
• Experience with at least one cloud platform (GCP, Azure, or AWS).

Responsibilities

• Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems (DAST).
• Validate and tune API and DAST scan configurations for coverage and noise reduction.
• Perform manual application security testing and penetration testing of web apps, APIs, and services.
• Review findings from SAST, SCA, DAST tools including triage and reducing false positives.
• Conduct API dynamic testing to identify vulnerabilities and misconfigurations.
• Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.
• Evaluate cloud environments (GCP, Azure, AWS) for misconfigurations and exposure risks for CSPM.
• Implement and maintain CI/CD security integrations and automation workflows.
• Develop scripts and CLI tooling to support scalable testing and validation.
• Partner with development teams to remediate vulnerabilities and improve secure coding practices.
• Participate in architecture/design reviews with actionable security recommendations.
• Utilize AI tools to enhance productivity and testing efficiency while maintaining secure practices.
• Track and report vulnerabilities, remediation progress, and security metrics.

Skills

Manual application security testing

SAST, SCA, DAST tools

OWASP Top 10 knowledge

Cloud platforms experience (GCP/AWS/AZ

Programming/scripting (Python/Java/JS)

Linux/Unix CLI proficiency

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Burp Suite

Snyk

API security tools

Job description

KeyBank seeks an experienced Applications & Cloud Defense Specialist in Brooklyn, OH, to configure DAST and API scans within CI/CD pipelines and perform both automated and manual security testing across web apps, APIs, and cloud environments.

You will collaborate with development, DevOps, and cloud teams to embed security into pipelines, review findings, and drive secure coding practices, leveraging AI-enabled tooling where appropriate.