{"id":2580599,"url":"https://alion.io/job/keybank-application-cloud-security-specialist-dast-specialist","title":"Application & Cloud Security Specialist (DAST Specialist)","company":{"id":450627,"name":"KeyBank","domain":"key.com","url":"https://alion.io/company/key-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":30,"ghost_share":0,"stale_share":0.7,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":69000,"max":105000,"currency":"USD","period":"year","gross":null,"usd_annual":105000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Unix","optional":false},{"name":"Burp Suite","optional":true},{"name":"Kubernetes","optional":true},{"name":"Snyk","optional":true}],"status":"live","first_seen_at":"2026-10-14T00:00:00Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-18T16:34:53Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Location:\n4910 Tiedeman Road, Brooklyn OhioPosition Summary\nOur Cyber Application & Cloud Defense team operates within Key’s broader Cyber Defense function in Corporate Information Security. Our mission is to enable secure software delivery and resilient cloud environments by proactively identifying, assessing, and reducing application and cloud security risks.\nThe Application & Cloud Security Specialist is responsible for configuring and optimizing automated dynamic testing tools for API scanning and Dynamic Application Security Testing (DAST). The role will implement and configure DAST and API scans within CI/CD pipelines and on a schedule.\nQualified candidates will also be able to perform application security assessments and cloud security reviews across modern development and cloud-native environments. This role combines hands-on manual penetration testing with the use of SAST, SCA, and DAST tools, as well as cloud security posture evaluation through CSPM capabilities.\nYou will work closely with development, DevOps, and cloud engineering teams to integrate security into CI/CD pipelines and improve secure coding practices. This role requires strong technical depth, development experience, and proficiency with command-line tools.\nThe ideal candidate is hands-on, execution-focused, and comfortable leveraging modern tooling-including AI-powered development and security assistants-to improve productivity, testing depth, and vulnerability detection.\nKey Responsibilities\nImplement automated dynamic application security testing tools across web applications, APIs, and distributed systems.\nValidate and tune API and DAST scan configurations, ensuring sufficient coverage and improving signal-to-noise ratio.\nPerform manual application security testing and penetration testing of web applications, APIs, and services.\nReview and validate findings from SAST, SCA, and DAST tools, including triage and false positive reduction.\nConduct API security and dynamic testing to identify vulnerabilities and misconfigurations.\nAssess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.\nEvaluate cloud environments (GCP, Azure, AWS) for misconfigurations, excessive permissions, and exposure risks in support of the CSPM program.\nImplement and maintain CI/CD security integrations, including scanning tools and automation workflows.\nDevelop scripts and CLI-based tooling to support scalable security testing and validation activities.\nPartner with development teams to remediate vulnerabilities and improve secure coding practices.\nParticipate in architecture and design reviews, providing actionable security recommendations.\nUtilize AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency while maintaining secure and responsible usage practices.\nTrack and report vulnerabilities, remediation progress, and security metrics.\nRequired Qualifications\nBachelor of Computer Science, Cybersecurity, or related field-or equivalent experience.\n4+ years of experience in application security, penetration testing, or secure software development.\nHands-on experience with:Manual application security testing (web/API)\nSAST, SCA, DAST tools\nCommon vulnerabilities (OWASP Top 10, API risks)\n\nExperience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).\nStrong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar).\nProficiency working in command-line environments (Linux/Unix).\nFamiliarity with CI/CD pipelines and DevSecOps practices.\nExperience or comfort using AI-enabled tools and coding assistants (e.g., for code analysis, automation, or testing support).\nPreferred Qualifications / Certifications\nExperience with AppSec tools (e.g., Snyk, Burp Suite, API security tools).\nFamiliarity with containers, Kubernetes, and cloud-native architectures.\nExposure to IaC security practices.\nCertifications such as:GIAC Cloud Security Automation (GCSA)\nGIAC Web Application Penetration Tester (GWAPT)\nOffensive Security Web Expert (OSWE)\nCloud security certifications (AWS/Azure/GCP)\n\nCOMPENSATION AND BENEFITS\nThis position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.\nKey has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.\nJob Posting Expiration Date: 10/28/2026\n\nKeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing .\n#LI-Remote","description_format":"text","description_chars":5461,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Commercial & Retail Banks","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-15T01:47:57Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.624,"p_room":1,"age_days":5,"expected_fill_days":25,"reasons":["conf:13","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":105000,"is_top_pay":false},"html_url":"https://alion.io/job/keybank-application-cloud-security-specialist-dast-specialist","json_url":"https://alion.io/job/keybank-application-cloud-security-specialist-dast-specialist.json","meta":{"generated_at":"2026-10-19T13:33:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9729,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450627},"rest":"https://alion.io/mcp/rest/get_company?id=450627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkeybank-application-cloud-security-specialist-dast-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkeybank-application-cloud-security-specialist-dast-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkeybank-application-cloud-security-specialist-dast-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/keybank-application-cloud-security-specialist-dast-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkeybank-application-cloud-security-specialist-dast-specialist"}]}