Application Security Engineer: SCA & Secure CI/CD Expert

LE018 Zelis Healthcare, LLC; Plano (TX); On-site; USD 127,000 - 160,550; Full time

Benefits offered by this job

401(k) plan with employer match

PTO & holidays

Life insurance

Health benefits

Job summary

Zelis Healthcare, LLC in Plano, TX seeks an experienced Application Security Engineer with deep SCA expertise to strengthen the security of our software supply chain and embed security controls throughout the SDLC. You will help integrate scanning tools into CI/CD pipelines and partner with developers to triage vulnerabilities.

The ideal candidate will have extensive experience in integrating SCA tooling, evaluating exploitability, and enabling secure application development at scale.

Qualifications

• Bachelor's degree in a related technical field.
• Experience with SCA and application security tooling in CI/CD.
• Experience managing open-source license compliance and governance.
• Strong secure coding practices and threat modeling experience.

Responsibilities

• Lead the implementation and optimization of SCA solutions across enterprise apps.
• Establish processes for open-source risk and license compliance management.
• Integrate SCA and security tooling into CI/CD pipelines for continuous validation.
• Deploy and manage security platforms (Snyk, Black Duck, Mend, Veracode, Checkmarx ONE).
• Embed guardrails in build pipelines using Jenkins, GitHub Actions, or GitLab CI.
• Analyze vulnerabilities for exploitability, reachability, and impact.
• Prioritize findings and guide remediation to reduce risk.
• Develop OSS governance policies and provide secure coding guidance.

Skills

Java

Python

C++

Ruby

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Snyk

Black Duck

Mend

Veracode

Checkmarx ONE

Artifactory

Jenkins

GitHub Actions

GitLab CI

Job description

Zelis Healthcare, LLC in Plano, TX seeks an experienced Application Security Engineer with deep SCA expertise to strengthen the security of our software supply chain and embed security controls throughout the SDLC. You will help integrate scanning tools into CI/CD pipelines and partner with developers to triage vulnerabilities.

The ideal candidate will have extensive experience in integrating SCA tooling, evaluating exploitability, and enabling secure application development at scale.