AppSec Engineer I: SDLC & Automation Lead

Transaction Network Services; Illinois; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K plan with company match

Job summary

Transaction Network Services in Illinois seeks an Application Security Engineer to advance secure software development practices across multiple teams. The role focuses on integrating security throughout the SDLC and enabling secure delivery of business applications.

The engineer leads SAST/SCA/ASPM, CI/CD security integrations, container security scanning, and vulnerability management while supporting threat modeling and secure design reviews. A 5+ year background in AppSec is expected.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Skills

SAST

SCA

DAST

ASPM

CI/CD security

Container security

Threat modeling

Secure code review

GitLab

GitHub

Azure DevOps

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services in Illinois seeks an Application Security Engineer to advance secure software development practices across multiple teams. The role focuses on integrating security throughout the SDLC and enabling secure delivery of business applications.

The engineer leads SAST/SCA/ASPM, CI/CD security integrations, container security scanning, and vulnerability management while supporting threat modeling and secure design reviews. A 5+ year background in AppSec is expected.