AppSec Engineer I: Secure SDLC & CI/CD

Transaction Network Services; Ohio; Presencial; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

Transaction Network Services (TNS) is seeking an experienced Application Security Engineer to advance secure software delivery across the SDLC. You will partner with development, DevOps, and security teams to identify, assess, and remediate application security risks while enabling business applications.

The role drives SAST, SCA, ASPM, CI/CD security integrations, container security scanning, vulnerability management, and security automation, including runbooks and remediation initiatives.

Formación

• Bachelor's degree or equivalent in a related field.
• 5+ years of Application Security or secure development experience.
• Experience implementing SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on with modern development platforms (GitLab, GitHub, Azure DevOps).
• Ability to collaborate with development, security, and DevOps teams.

Responsabilidades

• Lead application security initiatives across the SDLC.
• Support threat modeling, architecture reviews, and secure design consultations.
• Implement and manage SAST, SCA, container security, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Remediate findings with development teams and mentor secure coding practices.

Conocimientos

SAST

SCA

DAST

ASPM

CI/CD security

Container security

Threat modeling

Secure coding

Educación

Bachelor's degree

Herramientas

GitLab

GitHub

Azure DevOps

Descripción del empleo

Transaction Network Services (TNS) is seeking an experienced Application Security Engineer to advance secure software delivery across the SDLC. You will partner with development, DevOps, and security teams to identify, assess, and remediate application security risks while enabling business applications.

The role drives SAST, SCA, ASPM, CI/CD security integrations, container security scanning, vulnerability management, and security automation, including runbooks and remediation initiatives.