Application & Cloud Security Specialist (DAST Specialist)

Configures and optimizes DAST and API security scanning across applications, APIs, and CI/CD pipelines. Performs manual application penetration testing, validates SAST/SCA/DAST findings, assesses cloud security across AWS, Azure, and GCP, and develops scripting and CLI tooling. Partners with development, DevOps, and cloud teams to remediate vulnerabilities, improve secure coding, conduct architecture reviews, and track security metrics., Our Cyber Application & Cloud Defense team operates within Key’s broader Cyber Defense function in Corporate Information Security. Our mission is to enable secure software delivery and resilient cloud environments by proactively identifying, assessing, and reducing application and cloud security risks.

The Application & Cloud Security Specialist is responsible for configuring and optimizing automated dynamic testing tools for API scanning and Dynamic Application Security Testing (DAST). The role will implement and configure DAST and API scans within CI/CD pipelines and on a schedule.

Qualified candidates will also be able to perform application security assessments and cloud security reviews across modern development and cloud-native environments. This role combines hands-on manual penetration testing with the use of SAST, SCA, and DAST tools, as well as cloud security posture evaluation through CSPM capabilities.

You will work closely with development, DevOps, and cloud engineering teams to integrate security into CI/CD pipelines and improve secure coding practices. This role requires strong technical depth, development experience, and proficiency with command-line tools.

The ideal candidate is hands-on, execution-focused, and comfortable leveraging modern tooling-including AI-powered development and security assistants-to improve productivity, testing depth, and vulnerability detection., * Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems.

• Validate and tune API and DAST scan configurations, ensuring sufficient coverage and improving signal-to-noise ratio.
• Perform manual application security testing and penetration testing of web applications, APIs, and services.
• Review and validate findings from SAST, SCA, and DAST tools, including triage and false positive reduction.
• Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations.
• Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.
• Evaluate cloud environments (GCP, Azure, AWS) for misconfigurations, excessive permissions, and exposure risks in support of the CSPM program.
• Implement and maintain CI/CD security integrations, including scanning tools and automation workflows.
• Develop scripts and CLI-based tooling to support scalable security testing and validation activities.
• Partner with development teams to remediate vulnerabilities and improve secure coding practices.
• Participate in architecture and design reviews, providing actionable security recommendations.
• Utilize AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency while maintaining secure and responsible usage practices.
• Track and report vulnerabilities, remediation progress, and security metrics., Manage healthcare revenue cycle activities including billing, collections, claims, accounts receivable, denials, payer follow-up, reconciliations, and reimbursement analysis. Support outsourced client engagements, improve operational workflows, communicate with clients, and provide guidance on revenue cycle best practices. Use EHR systems, payer portals, clearinghouses, and Microsoft tools while coordinating domestic and offshore teams and managing multiple client engagements. Top Skills: Billing SoftwareCernerClearinghousesEclinicalworksEhr SystemsEpicMeditechMicrosoft ToolsPayer Portals Atlassian

Solution Sales Center of Excellence, Teamwork Collection

21 Minutes Ago In-Office or Remote USA Entry level Entry level Cloud * Information Technology * Productivity * Security * Software * App development * Automation Lead global mid-market sales performance and revenue growth for Atlassian’s Teamwork Collection. Develop operating plans, strategic sales plays, inspection rhythms, and scalable go-to-market execution. Partner across sales, SDR, channel, demand generation, product, and marketing teams to increase pipeline, accelerate deal velocity, and expand market presence. Enable account executives and sales managers through field readiness, onboarding, and clear positioning of collaboration and AI solutions. Top Skills: AIEnterprise Saas Atlassian

Principal Analyst, Sales Strategy & Operations

21 Minutes Ago In-Office or Remote Expert/Leader Expert/Leader Cloud * Information Technology * Productivity * Security * Software * App development * Automation Partners with Sales leadership to analyze business performance, identify risks and opportunities, and improve go-to-market execution. Leads forecasting, pipeline and business reviews, strategic initiatives, annual planning, and operational improvements. Collaborates with Finance, Analytics, Compensation, Enablement, Systems, and Operations teams on capacity, territories, quotas, coverage, and investment decisions. Builds scalable, automated processes and drives cross-functional alignment and accountability.

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

• Bachelor of Computer Science, Cybersecurity, or related field-or equivalent experience.
• 4+ years of experience in application security, penetration testing, or secure software development.
• Hands-on experience with:
• Manual application security testing (web/API)
• SAST, SCA, DAST tools
• Common vulnerabilities (OWASP Top 10, API risks)
• Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).
• Strong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar).
• Proficiency working in command-line environments (Linux/Unix).
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Experience or comfort using AI-enabled tools and coding assistants (e.g., for code analysis, automation, or testing support).

Preferred Qualifications / Certifications

• Experience with AppSec tools (e.g., Snyk, Burp Suite, API security tools).
• Familiarity with containers, Kubernetes, and cloud-native architectures.
• Exposure to IaC security practices.
• Certifications such as:
• GIAC Cloud Security Automation (GCSA)
• GIAC Web Application Penetration Tester (GWAPT)
• Offensive Security Web Expert (OSWE)
• Cloud security certifications (AWS/Azure/GCP)

This position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.