Application Security Engineer - SDLC & DevSecOps

Transaction Network Services; Florida; On-site; USD 75,000 - 83,000; Full time

Job summary

Transaction Network Services is seeking an Application Security Engineer to advance secure software development across the SDLC. You will collaborate with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The role leads app security initiatives including SAST, SCA, ASPM, CI/CD security integrations, container security scanning, vulnerability management, and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Develop and maintain AppSec automation, workflows, and operational runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.

Skills

SAST

SCA

DAST

ASPM

CI/CD security

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services is seeking an Application Security Engineer to advance secure software development across the SDLC. You will collaborate with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The role leads app security initiatives including SAST, SCA, ASPM, CI/CD security integrations, container security scanning, vulnerability management, and