AppSec Engineer: Secure SDLC & Automation

Transaction Network Services; California City (CA); On-site; USD 75,000 - 83,000; Full time

Benefits offered by this job

Medical & dental coverage

Life insurance

Paid holidays & vacations

401(k) with company match

Job summary

Transaction Network Services is seeking an Application Security Engineer to advance secure software development across the SDLC in California City, CA. You will lead SAST/SCA, ASPM, and CI/CD security initiatives, partnering with development, DevOps and security teams to enable secure delivery of business applications.

You will drive threat modeling, secure code reviews, and security tooling integration, while developing runbooks and remediation workflows.

Qualifications

• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar development platforms.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.
• Relevant certifications preferred (CISSP, CSSLP, GIAC, etc.).

Responsibilities

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate findings and improve secure coding.
• Develop AppSec automation, workflows, and runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize remediation for critical vulnerabilities and communicate risk.

Skills

SAST

SCA

DAST

ASPM

Container security

CI/CD security

GitLab

GitHub

Azure DevOps

OWASP Top 10

Threat modeling

Secure SDLC

Vulnerability management

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services is seeking an Application Security Engineer to advance secure software development across the SDLC in California City, CA. You will lead SAST/SCA, ASPM, and CI/CD security initiatives, partnering with development, DevOps and security teams to enable secure delivery of business applications.

You will drive threat modeling, secure code reviews, and security tooling integration, while developing runbooks and remediation workflows.