AppSec Engineer I — Secure SDLC & SAST Champion

Transaction Network Services; Arkansas City (KS); On-site; USD 75,000 - 83,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K plan with company match

Job summary

Transaction Network Services is seeking an Application Security Engineer to advance our secure software development program by integrating security across the SDLC. You will partner with development, DevOps, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

You will lead AppSec initiatives including SAST, SCA, ASPM, container security, CI/CD security, and automation, and support threat modeling, secure code

Qualifications

• 5+ years in Application Security or secure development.
• Experience with SAST, SCA, DAST, ASPM, container security, CI/CD security controls.
• Hands-on with GitLab, GitHub, Azure DevOps or similar platforms.
• Knowledge of OWASP Top 10 and threat modelling.
• Certifications such as CISSP or CSSLP preferred.

Responsibilities

• Lead application security assessments and remediation efforts.
• Implement and manage SAST, SCA, container and CI/CD security controls.
• Drive ASPM adoption and security tool integrations.
• Collaborate with development teams to improve secure coding practices.

Skills

Application security

Threat modelling

Secure SDLC

Security governance

Stakeholder management

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Bachelor's degree in Information Technology

Tools

GitLab

GitHub

Azure DevOps

ArmorCode

Job description

Transaction Network Services is seeking an Application Security Engineer to advance our secure software development program by integrating security across the SDLC. You will partner with development, DevOps, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

You will lead AppSec initiatives including SAST, SCA, ASPM, container security, CI/CD security, and automation, and support threat modeling, secure code