Application Security Analyst I - Secure SDLC & Remediation

Transaction Network Services; Yorktown (VA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical & dental coverage

Life Insurance

Paid holidays & vacations

401K plan with company match

Job summary

Transaction Network Services is seeking an Application Security Engineer to advance its secure software development program by integrating security across the SDLC. You will partner with application development, DevOps, infrastructure and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The role leads SAST, SCA, ASPM, CI/CD security, container security scanning, vulnerability management and security automation.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Skills

AppSec

Threat modeling

Secure coding

Remediation

Automation

CI/CD security

Education

Bachelor's degree in cybersecurity / computer science / information technology

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services is seeking an Application Security Engineer to advance its secure software development program by integrating security across the SDLC. You will partner with application development, DevOps, infrastructure and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The role leads SAST, SCA, ASPM, CI/CD security, container security scanning, vulnerability management and security automation.