Application Security Engineer I: SDLC & Secure DevOps

Transaction Network Services; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

401K plan with company match

Paid holidays and vacations

Job summary

Transaction Network Services is seeking an experienced Application Security Engineer to advance secure software delivery by integrating security across the SDLC. You will collaborate with development, DevOps, and security teams to identify, assess, and remediate risks while enabling secure business applications.

The role leads SAST, SCA, ASPM, container security, and CI/CD security efforts, supporting threat modeling, secure code review, and security tooling across units.

Qualifications

• Bachelor's degree in a related field is required or equivalent experience.
• 5+ years of Application Security or secure development experience preferred.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD controls.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate findings and improve secure coding.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize remediation efforts for critical/high-risk vulnerabilities.

Skills

SAST

SCA

ASPM

CI/CD security

container security

vulnerability management

security automation

threat modeling

secure code review

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services is seeking an experienced Application Security Engineer to advance secure software delivery by integrating security across the SDLC. You will collaborate with development, DevOps, and security teams to identify, assess, and remediate risks while enabling secure business applications.

The role leads SAST, SCA, ASPM, container security, and CI/CD security efforts, supporting threat modeling, secure code review, and security tooling across units.