AppSec Engineer: SDLC, SAST/SCA & DevSecOps

Transaction Network Services (TNS); Pennsylvania; On-site; USD 75,000 - 83,000; Full time

Benefits offered by this job

Medical and dental coverage

401K with company match

Paid holidays and vacations

Life insurance

Job summary

Transaction Network Services (TNS) is seeking a Senior Application Security Engineer to advance secure SDLC by integrating security across development, DevOps, and infrastructure teams. You will drive SAST, SCA, ASPM, CI/CD security, container security, and vulnerability management while supporting threat modeling and secure code reviews.

The role collaborates with multiple business units, develops runbooks, and leads remediation activities.

Qualifications

• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Develop and maintain AppSec automation, workflows, and operational runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for high-risk vulnerabilities.
• Provide application security guidance across multiple business units.

Skills

Application security

Threat modeling

Secure SDLC

Communication

Stakeholder management

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services (TNS) is seeking a Senior Application Security Engineer to advance secure SDLC by integrating security across development, DevOps, and infrastructure teams. You will drive SAST, SCA, ASPM, CI/CD security, container security, and vulnerability management while supporting threat modeling and secure code reviews.

The role collaborates with multiple business units, develops runbooks, and leads remediation activities.