Remote Application Security Engineer — SDLC & Cloud

Kemper Corporation; Illinois; Hybrid; USD 94,000 - 156,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

PTO

Job summary

Kemper Corporation is hiring an Application Security Analyst to embed security into the software development lifecycle across modern applications, APIs, cloud-native services, and software supply chains. The role partners with developers and architects to prevent, identify, validate, and remediate exploitable application risk.

Key responsibilities include integrating security into architecture and CI/CD, performing SAST/DAST/SCA and API testing, and prioritizing vulnerabilities by risk and

Qualifications

• Hands-on experience with application security testing, secure code review, and vulnerability validation.
• Strong knowledge of OWASP Top 10/API risks, authentication/authorization patterns, session management, cryptography fundamentals, input validation, and common web/app attack techniques.
• Working knowledge of SAST, DAST, SCA, API testing, secrets scanning, and CI/CD security tooling.
• Understanding of modern software architectures, REST/GraphQL APIs, containers, cloud services, and software supply-chain dependencies.

Responsibilities

• Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.
• Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing; distinguish exploitable weaknesses from tool noise.
• Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.

Skills

App security testing

Secure code review

Vulnerability validation

OWASP Top 10

Threat modeling

Architecture review

Risk-based prioritization

REST/GraphQL APIs

CI/CD security

Education

BS in Computer Science / IT or related field

Tools

SAST

DAST

SCA

API testing

Secrets scanning

CI/CD security tooling

Job description

Kemper Corporation is hiring an Application Security Analyst to embed security into the software development lifecycle across modern applications, APIs, cloud-native services, and software supply chains. The role partners with developers and architects to prevent, identify, validate, and remediate exploitable application risk.

Key responsibilities include integrating security into architecture and CI/CD, performing SAST/DAST/SCA and API testing, and prioritizing vulnerabilities by risk and