Application Security Analyst
Kemper Corporation4 days ago
Remote, United StatesMid Level
Base Salary
$94k - $156k/yr
Responsibilities
- Integrate security requirements and threat modeling into architecture, design, development, testing, release, and exception processes.
- Perform and validate SAST, DAST, SCA, API, mobile, and manual security testing while distinguishing exploitable weaknesses from tool noise.
- Conduct security design and architecture reviews for web, API, cloud-native, containerized, and distributed applications.
- Partner with developers to provide code-level and design-level remediation guidance and verify issue closure.
- Build or improve CI/CD security controls, scanning integrations, secure coding standards, and developer enablement.
- Prioritize application vulnerabilities and security debt using exploitability, asset criticality, risk, and business context.
- Analyze recurring defect patterns and drive preventive control improvements across engineering teams.
Requirements
- Hands-on experience with application security testing, secure code review, and vulnerability validation.
- Strong knowledge of OWASP Top 10 and API risks, authentication and authorization patterns, session management, cryptography fundamentals, input validation, and common web and application attack techniques.
- Working knowledge of SAST, DAST, SCA, API testing, secrets scanning, and CI/CD security tooling.
- Understanding of modern software architectures, REST and GraphQL APIs, containers, cloud services, and software supply-chain dependencies.
- Ability to engage developers at a technical level and provide actionable remediation guidance.
- Experience with secure SDLC practices, threat modeling, architecture review, risk-based exceptions, and application-risk prioritization.
- Ability to translate exploitability into business impact and risk treatment decisions.
- Understanding of security-control objectives for application development and deployment.
- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related discipline, or equivalent relevant professional experience.
Benefits
- Medical, dental, vision, PTO, and 401(k) benefits are included in the Kemper benefits package.
- Remote work is available in Alabama, Florida, Georgia, and Illinois.
Tech Stack
GraphQL
Categories
About Kemper Corporation
Kemper Corporation is a U.S. insurer offering auto, home, life, accident and health, and specialty personal lines for individuals and small businesses, primarily under the Kemper Auto and Kemper Life brands. The company distributes policies through independent agents, brokers, and online channels, generating revenue from premiums and investment income. Founded in 1990 and headquartered in Chicago, it is a public company listed on the NYSE.