Information Security Consultant

KeyBank

. Perform manual application security testing and penetration testing of web applications, APIs, and services .

Posted 10/14/2026full-timeBrooklyn • Ohio • United StatesMid-LevelSenior💰 $69,000 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security testing, including manual penetration testing and vulnerability assessment across web applications and APIs. Proficient in cloud security practices and CI/CD security integrations, with strong programming skills to develop automation tools and scripts.

Highest-signal resume keywords

Application Security TestingPenetration TestingSAST, SCA, DAST ToolsCloud Security (GCP, Azure, AWS)Programming/Scripting (Python, Java, JavaScript)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual Application Security TestingVulnerability AssessmentCI/CD Security IntegrationsScripting (Python, Java, JavaScript, Bash, PowerShell)Command-Line Proficiency (Linux/Unix)API Security TestingOWASP Top 10 KnowledgeDevSecOps PracticesAutomation WorkflowsFalse-Positive Reduction

Soft Skills

Collaboration with Development TeamsCommunication of Security RecommendationsProblem-Solving

Tools & Technologies

SnykBurp SuiteAI ToolsAPI Security ToolsContainersKubernetes

Certifications & Qualifications

GWAPTOSWECloud Security Certifications (AWS/Azure/GCP)

Industry Keywords

Application SecurityPenetration TestingVulnerability ManagementSupply-Chain RiskInfrastructure as Code (IaC) Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJavaJavaScriptKubernetesLinuxPythonUnix

About the role

Key responsibilities & impact

Perform manual application security testing and penetration testing of web applications, APIs, and services
Review and validate SAST, SCA, and DAST findings, including triage and false-positive reduction
Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations
Assess open-source dependencies and third-party libraries for vulnerabilities and supply-chain risk
Evaluate GCP, Azure, and AWS environments for misconfigurations, excessive permissions, and exposure risks
Implement and maintain CI/CD security integrations, scanning tools, and automation workflows
Develop scripts and command-line tooling for scalable security testing and validation
Partner with development teams to remediate vulnerabilities and improve secure coding practices
Participate in architecture and design reviews and provide actionable security recommendations
Use AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency
Track and report vulnerabilities, remediation progress, and security metrics

Requirements

What you’ll need

Bachelor of Computer Science, Cybersecurity, or related field—or equivalent experience
4+ years of experience in application security, penetration testing, or secure software development
Hands-on experience with manual application security testing for web/API
Experience with SAST, SCA, and DAST tools
Knowledge of common vulnerabilities, including OWASP Top 10 and API risks
Experience with at least one cloud platform: Google Cloud, Microsoft Azure, or AWS
Strong programming/scripting experience with Python, Java, JavaScript, Bash, PowerShell, or similar
Proficiency working in command-line environments, including Linux/Unix
Familiarity with CI/CD pipelines and DevSecOps practices
Experience or comfort using AI-enabled tools and coding assistants
Preferred: Experience with AppSec tools such as Snyk, Burp Suite, and API security tools
Preferred: Familiarity with containers, Kubernetes, and cloud-native architectures
Preferred: Exposure to IaC security practices
Preferred certifications: GWAPT, OSWE, or cloud security certifications for AWS/Azure/GCP

Benefits

Comp & perks

Base salary range of $69,000.00–$105,000.00 annually
Eligibility for incentive compensation, which may include production, commission, and/or discretionary incentives
Benefits for which the position is eligible (specific benefits linked separately)
Flexible work options in circumstances where the role can be performed effectively in a mobile environment