Application Security Analyst

An extraordinarily talented group of individuals work together every day to drive TNS' success, from both professional and personal perspectives. Come join the excellence!

The Senior Application Security Engineer is responsible for advancing the organization's secure software development program by integrating security throughout the software development lifecycle (SDLC). This role partners closely with application development, Dev Ops, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The position leads application security initiatives including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Application Security Posture Management (ASPM), CI/CD security integrations, container security scanning, vulnerability management, and security automation. The engineer will support security assessments, threat modeling, secure code review processes, and security tooling integrations across multiple business units. Responsibilities also include managing App Sec intake processes, developing operational runbooks, driving remediation activities, and supporting strategic security transformation initiatives.

These responsibilities align with the work currently owned by the departing Application Security resource, including Armor Code ASPM implementation, SAST/SCA integrations, App Sec automation, Git Lab container scanning initiatives, and management of high-priority application security activities.

This role partners closely with application development, Dev Ops, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

The position leads application security initiatives including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Application Security Posture Management (ASPM), CI/CD security integrations, container security scanning, vulnerability management, and security automation. The engineer will support security assessments, threat modeling, secure code review processes, and security tooling integrations across multiple business units. Responsibilities also include managing App Sec intake processes, developing operational runbooks, driving remediation activities, and supporting strategic security transformation initiatives.

These responsibilities align with the work currently owned by the departing Application Security resource, including Armor Code ASPM implementation, SAST/SCA integrations, App Sec automation, Git Lab container scanning initiatives, and management of high-priority application security activities.

• Lead application security assessments and vulnerability management activities.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate security findings and improve secure coding practices.
• Develop and maintain App Sec automation, workflows, and operational runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize and manage remediation efforts for critical and high-risk vulnerabilities.
• Provide application security guidance across multiple business units and technology teams.

Preferred

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of Application Security or Secure Development experience.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD security controls.
• Hands-on experience with Git Lab, Git Hub, Azure Dev Ops, or similar development…