Application Security Engineer – Secure SDLC & CI/CD

Transaction Network Services (TNS); Illinois; On-site; USD 75,000 - 83,000; Full time

Job summary

Transaction Network Services (TNS) is seeking a Senior Application Security Engineer to advance secure software delivery across the organization. You will partner with development, DevOps, infrastructure, and security teams to identify, assess, and remediate risks while enabling secure delivery of business applications.

You will lead SAST, SCA, ASPM, CI/CD security, container scanning, vulnerability management, and security automation.

Qualifications

• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Develop and maintain AppSec automation, workflows, and operational runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Skills

OWASP Top 10 knowledge

Threat modeling

Secure SDLC

Communication skills

Stakeholder management

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab

GitHub

Azure DevOps

SAST

SCA

CI/CD security

Container security

Job description

Transaction Network Services (TNS) is seeking a Senior Application Security Engineer to advance secure software delivery across the organization. You will partner with development, DevOps, infrastructure, and security teams to identify, assess, and remediate risks while enabling secure delivery of business applications.

You will lead SAST, SCA, ASPM, CI/CD security, container scanning, vulnerability management, and security automation.