Application Security Analyst I

TNS Inc.; Virginia (MN); Hybrid; USD 75,000 - 83,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K plan with company match

Job summary

TNS Inc. is seeking a Senior Application Security Engineer to advance our secure SDLC across multiple teams. You will lead SAST, SCA, ASPM initiatives, container security scanning, and security tooling integrations to enable secure business applications.

You will collaborate with development, DevOps, and security to model threats, perform secure code reviews, and drive remediation activities while contributing to strategic security transformation efforts.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field preferred.
• Minimum 5+ years in Application Security or secure software development.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security.

Responsibilities

• Lead app security assessments and vulnerability management.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Remediate findings with development teams and improve secure coding.
• Develop AppSec automation, workflows, and runbooks.
• Support threat modeling and secure design reviews.

Skills

5+ years of AppSec experience

Threat modeling

Secure SDLC

Excellent communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

GitLab

GitHub

Azure DevOps

SAST tools

SCA tools

Job description

An extraordinarily talented group of individuals work together every day to drive TNS' success, from both professional and personal perspectives. Come join the excellence!

Overview

The Senior Application Security Engineer is responsible for advancing the organization's secure software development program by integrating security throughout the software development lifecycle (SDLC). This role partners closely with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications. The position leads application security initiatives including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Application Security Posture Management (ASPM), CI/CD security integrations, container security scanning, vulnerability management, and security automation. The engineer will support security assessments, threat modeling, secure code review processes, and security tooling integrations across multiple business units. Responsibilities also include managing AppSec intake processes, developing operational runbooks, driving remediation activities, and supporting strategic security transformation initiatives. These responsibilities align with the work currently owned by the departing Application Security resource, including ArmorCode ASPM implementation, SAST/SCA integrations, AppSec automation, GitLab container scanning initiatives, and management of high-priority application security activities.

Responsibilities

This role partners closely with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications. The position leads application security initiatives including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Application Security Posture Management (ASPM), CI/CD security integrations, container security scanning, vulnerability management, and security automation. The engineer will support security assessments, threat modeling, secure code review processes, and security tooling integrations across multiple business units. Responsibilities also include managing AppSec intake processes, developing operational runbooks, driving remediation activities, and supporting strategic security transformation initiatives. These responsibilities align with the work currently owned by the departing Application Security resource, including ArmorCode ASPM implementation, SAST/SCA integrations, AppSec automation, GitLab container scanning initiatives, and management of high-priority application security activities.

Key Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Develop and maintain AppSec automation, workflows, and operational runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Qualifications

• Preferred Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.
• Strong communication and stakeholder management skills.
• Relevant certifications such as CISSP, CSSLP, GSEC, GWAPT, or GIAC certifications preferred.

For this role, we anticipate paying $75,000 - $83,000 annually. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate’s knowledge, skills, abilities, and geographic location.

Benefits

• medical and dental coverage
• life insurance
• paid holidays and vacations
• 401K plan with company match

With employees based in 21 countries around the world, TNS is a leading global provider of data communication and interoperability services to diverse industries, such as retail, banking, payment processing, telecommunications and the financial markets. TNS’ services extend to over 60 countries and we deliver mission critical solutions to many Fortune 500 companies. TNS employees play a vital role in the delivery of our services and we recognize them as our most valuable asset. We are proud to offer competitive salaries and benefit packages, and due to the global nature of our business we can offer opportunities to relocate to different locations, if your personal circumstances change.

TNS is an equal opportunity employer.

TNS evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.