Application & Cloud Security Specialist – DAST Specialist

KeyBank

. Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems .

Posted 10/14/2026full-timeBrooklyn • Ohio • United StatesMid-LevelSenior💰 $69,000 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including automated dynamic application security testing, manual penetration testing, and vulnerability assessment across web applications and APIs. Proficient in cloud security practices and CI/CD security integrations, with strong programming skills in Python and Java.

Highest-signal resume keywords

Application Security TestingPenetration TestingSAST, SCA, DAST ToolsCloud Security (AWS, Azure, GCP)CI/CD Security Integrations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application Security TestingPenetration TestingSAST ToolsSCA ToolsDAST ToolsPython ProgrammingJava ProgrammingJavaScript ProgrammingBash ScriptingPowerShell Scripting

Tools & Technologies

GCPAzureAWSSnykBurp SuiteAI ToolsCommand-Line EnvironmentsLinuxKubernetesContainers

Certifications & Qualifications

GCSAGWAPTOSWECloud Security Certifications

Industry Keywords

OWASP Top 10API SecurityDevSecOpsIaC SecurityVulnerability AssessmentSupply Chain Risk

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDistributed SystemsGoogle Cloud PlatformJavaJavaScriptKubernetesLinuxPythonUnix

About the role

Key responsibilities & impact

Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems
Validate and tune API and DAST scan configurations to improve coverage and signal-to-noise ratio
Perform manual application security testing and penetration testing of web applications, APIs, and services
Review and validate SAST, SCA, and DAST findings, including triage and false-positive reduction
Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations
Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk
Evaluate GCP, Azure, and AWS environments for misconfigurations, excessive permissions, and exposure risks in support of CSPM
Implement and maintain CI/CD security integrations, scanning tools, and automation workflows
Develop scripts and command-line tooling for scalable security testing and validation
Partner with development teams to remediate vulnerabilities and improve secure coding practices
Participate in architecture and design reviews and provide actionable security recommendations
Use AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency
Track and report vulnerabilities, remediation progress, and security metrics

Requirements

What you’ll need

Bachelor of Computer Science, Cybersecurity, or related field—or equivalent experience
4+ years of experience in application security, penetration testing, or secure software development
Hands-on experience with manual application security testing for web/API
Experience with SAST, SCA, and DAST tools
Knowledge of common vulnerabilities, including OWASP Top 10 and API risks
Experience with at least one cloud platform: Google Cloud, Microsoft Azure, or AWS
Strong programming/scripting experience with Python, Java, JavaScript, Bash, PowerShell, or similar
Proficiency working in command-line environments, including Linux/Unix
Familiarity with CI/CD pipelines and DevSecOps practices
Experience or comfort using AI-enabled tools and coding assistants
Preferred: experience with AppSec tools such as Snyk, Burp Suite, and API security tools
Preferred: familiarity with containers, Kubernetes, and cloud-native architectures
Preferred: exposure to IaC security practices
Preferred certifications: GCSA, GWAPT, OSWE, or cloud security certifications for AWS/Azure/GCP

Benefits

Comp & perks

Eligibility for incentive compensation, which may include production, commission, and/or discretionary incentives
Benefits eligibility (specific benefits list linked in posting)
Flexible options for roles that can be performed effectively in a mobile environment