AppSec Engineer: Secure SDLC & SAST/CI/CD

Transaction Network Services; Clayton (NC); On-site; USD 75,000 - 83,000; Full time

Job summary

Transaction Network Services in the United States is looking for an Application Security Engineer to advance the organization's secure software development program by integrating security throughout the SDLC.

You will partner with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 5+ years in Application Security or Secure Development.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD controls.
• Hands-on with GitLab, GitHub, Azure DevOps, or similar.
• Knowledge of OWASP Top 10, threat modeling, and secure SDLC.
• Strong communication and stakeholder management; relevant certifications preferred (CISSP, CSSLP, GSEC, GWAPT, GIAC).

Responsibilities

• Lead application security assessments and vulnerability management.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Remediate security findings with development teams and improve secure coding.
• Develop AppSec automation, workflows, and runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize remediation for critical/high-risk vulnerabilities.
• Provide guidance across business units and tech teams.

Skills

AppSec leadership

Threat modeling

Secure SDLC

Vulnerability management

SAST

SCA

DAST

Container security

CI/CD security controls

GitLab

GitHub

Azure DevOps

OWASP Top 10

Communication

Stakeholder management

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab

GitHub

Azure DevOps

Job description

Transaction Network Services in the United States is looking for an Application Security Engineer to advance the organization's secure software development program by integrating security throughout the SDLC.

You will partner with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.