AppSec Engineer I: DevSecOps & SAST/ASPM

Transaction Network Services; Virginia Beach (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K plan with company match

Job summary

Transaction Network Services is seeking an Application Security Engineer to advance our secure software development program across the SDLC. You will partner with development, DevOps, and security teams to identify and remediate risks while enabling secure delivery of business applications.

You will lead SAST, SCA, ASPM, CI/CD security, and container scanning initiatives, support threat modeling and secure code review, and drive remediation and automation across multiple business units.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT, or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Skills

Application security

Vulnerability management

Threat modeling

Secure code review

CI/CD security

SAST

SCA

Container security

Security tooling

Cross-functional collab

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services is seeking an Application Security Engineer to advance our secure software development program across the SDLC. You will partner with development, DevOps, and security teams to identify and remediate risks while enabling secure delivery of business applications.

You will lead SAST, SCA, ASPM, CI/CD security, and container scanning initiatives, support threat modeling and secure code review, and drive remediation and automation across multiple business units.