Senior Application & Cloud Security Engineer

KeyBank; Cleveland (OH); Hybrid; USD 69,000 - 105,000; Full time

Job summary

KeyBank is seeking an experienced Application & Cloud Security Specialist to perform security assessments across modern development and cloud-native environments. You will combine manual testing with SAST/ SCA/ DAST tooling and CSPM evaluations while integrating security into CI/CD pipelines.

You will work with development, DevOps, and cloud engineers to remediate findings and improve secure coding practices, utilizing AI-enabled tools to enhance productivity and testing depth.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field—or equivalent experience
• 4+ years of experience in application security, penetration testing, or secure software development
• Hands-on experience with manual app security testing (web/API) and SAST/SCA/DAST tooling

Responsibilities

• Perform manual application security testing of web apps, APIs, and services
• Review findings from SAST/SCA/DAST tools and reduce false positives
• Assess cloud environments (GCP, Azure, AWS) for misconfigurations and risks
• Develop scripts and CLI tooling to support testing at scale
• Collaborate with dev/ DevOps to remediate vulnerabilities and improve secure coding

Skills

AppSec testing

SAST

SCA

DAST

Cloud security

CI/CD security

Python

Java

Command-line

Education

Bachelor's degree in Computer Science / Cybersecurity or related field

Tools

Burp Suite

Snyk

APIs security tools

Job description

KeyBank is seeking an experienced Application & Cloud Security Specialist to perform security assessments across modern development and cloud-native environments. You will combine manual testing with SAST/ SCA/ DAST tooling and CSPM evaluations while integrating security into CI/CD pipelines.

You will work with development, DevOps, and cloud engineers to remediate findings and improve secure coding practices, utilizing AI-enabled tools to enhance productivity and testing depth.