Application Security Engineer - SDLC & Automation

Transaction Network Services; Maryland City (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K with company match

Job summary

Transaction Network Services in Maryland is seeking an Application Security Engineer to advance the organization’s secure software development program by integrating security throughout the SDLC. You will partner with development, DevOps, infrastructure and security teams to identify, remediate, and enable secure delivery of business applications.

You will lead SAST, SCA, ASPM, container and CI/CD security, support threat modeling, secure code reviews and security tooling across multiple

Qualifications

• Bachelor's degree in a cybersecurity, CS, IT, or related field.
• Hands-on experience implementing application security across the SDLC.
• Strong knowledge of SAST/SCA/DAST and container security controls.
• Experience collaborating with development, DevOps, infrastructure and security teams.

Responsibilities

• Lead application security initiatives including SAST, SCA, ASPM, and CI/CD security.
• Support threat modeling, secure code reviews, and security tooling integrations.
• Manage AppSec intake processes and remediation activities across business units.
• Drive security transformation initiatives and cross-team collaboration.

Skills

SAST

SCA

DAST

ASPM

Container security

Threat modeling

Secure coding practices

DevSecOps

CI/CD security

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services in Maryland is seeking an Application Security Engineer to advance the organization’s secure software development program by integrating security throughout the SDLC. You will partner with development, DevOps, infrastructure and security teams to identify, remediate, and enable secure delivery of business applications.

You will lead SAST, SCA, ASPM, container and CI/CD security, support threat modeling, secure code reviews and security tooling across multiple