> Markdown version of [/jobs/ext/3756689-application-cloud-security-specialist-dast-specialist](https://www.wearedevelopers.com/jobs/ext/3756689-application-cloud-security-specialist-dast-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application & Cloud Security Specialist (DAST Specialist)

- **Company:** KeyCorp Insurance Agency USA Inc.
- **Location:** Brooklyn, OH, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $69,000.0 - $105,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Automation of Tests, Microsoft Azure, Bash Shell, Burp Suite, Command-Line Interface, Cloud Computing, Cloud Computing Security, Cloud Engineering, Static Program Analysis, Cyber Security, Computer Programming, System Configuration, Continuous Integration, Linux, DevOps, Distributed Systems, Python (Programming Language), Open Source Technology, Open Web Application Security, Windows PowerShell, Secure Coding, Software Engineering, Web Applications, Google Cloud, Cloud Platform System, Sonatype, Software Security, GWAPT, Kubernetes, Information Technology, Tenable Nessus, Devsecops, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 15, 2026
- **Apply:** https://diversityjobs.com/career/18641737/Application-Cloud-Security-Specialist-Dast-Specialist-Ohio-Brooklyn

## About the Role

* Bachelor of Computer Science, Cybersecurity, or related field-or equivalent experience.
 * 4+ years of experience in application security, penetration testing, or secure software development.
 * Hands-on experience with:
 + Manual application security testing (web/API)
 + SAST, SCA, DAST tools
 + Common vulnerabilities (OWASP Top 10, API risks)
 * Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).
 * Strong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar).
 * Proficiency working in command-line environments (Linux/Unix).
 * Familiarity with CI/CD pipelines and DevSecOps practices.
 * Experience or comfort using AI-enabled tools and coding assistants (e.g., for code analysis, automation, or testing support).

Preferred Qualifications / Certifications

 * Experience with AppSec tools (e.g., Snyk, Burp Suite, API security tools).
 * Familiarity with containers, Kubernetes, and cloud-native architectures.
 * Exposure to IaC security practices.
 * Certifications such as:
 + GIAC Cloud Security Automation (GCSA)
 + GIAC Web Application Penetration Tester (GWAPT)
 + Offensive Security Web Expert (OSWE)
 + Cloud security certifications (AWS/Azure/GCP)

## Description

The Application & Cloud Security Specialist is responsible for configuring and optimizing automated dynamic testing tools for API scanning and Dynamic Application Security Testing (DAST). The role will implement and configure DAST and API scans within CI/CD pipelines and on a schedule.

Qualified candidates will also be able to perform application security assessments and cloud security reviews across modern development and cloud-native environments. This role combines hands-on manual penetration testing with the use of SAST, SCA, and DAST tools, as well as cloud security posture evaluation through CSPM capabilities.

You will work closely with development, DevOps, and cloud engineering teams to integrate security into CI/CD pipelines and improve secure coding practices. This role requires strong technical depth, development experience, and proficiency with command-line tools.

The ideal candidate is hands-on, execution-focused, and comfortable leveraging modern tooling-including AI-powered development and security assistants-to improve productivity, testing depth, and vulnerability detection., * Implement automated dynamic application security testing tools across web applications, APIs, and distributed systems.

 * Validate and tune API and DAST scan configurations, ensuring sufficient coverage and improving signal-to-noise ratio.
 * Perform manual application security testing and penetration testing of web applications, APIs, and services.
 * Review and validate findings from SAST, SCA, and DAST tools, including triage and false positive reduction.
 * Conduct API security and dynamic testing to identify vulnerabilities and misconfigurations.
 * Assess open-source dependencies and third-party libraries for vulnerabilities and supply chain risk.
 * Evaluate cloud environments (GCP, Azure, AWS) for misconfigurations, excessive permissions, and exposure risks in support of the CSPM program.
 * Implement and maintain CI/CD security integrations, including scanning tools and automation workflows.
 * Develop scripts and CLI-based tooling to support scalable security testing and validation activities.
 * Partner with development teams to remediate vulnerabilities and improve secure coding practices.
 * Participate in architecture and design reviews, providing actionable security recommendations.
 * Utilize AI tools and coding assistants to enhance productivity, automate analysis, and improve testing efficiency while maintaining secure and responsible usage practices.
 * Track and report vulnerabilities, remediation progress, and security metrics.