Lead Application Security Engineer - SCA & CI/CD

Zelis

Plano (TX)

Hybrid

USD 140,000 - 190,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Zelis is seeking an experienced Application Security Engineer with deep expertise in Software Composition Analysis (SCA) to strengthen the security of our software supply chain and reduce risks associated with open-source and third-party components in internally developed applications.

This role will help integrate scanning tools into CI/CD pipelines and partner with developers and engineering teams to triage vulnerabilities and embed security controls throughout the software development

Qualifications

8+ years of experience in various AppSec domains.
Lead the implementation and optimization of Software Composition Analysis (SCA) solutions to identify vulnerabilities, license issues, and software supply chain risks.
Establish and maintain processes for managing risks with open-source dependencies.
Integrate SCA and app security tools in CI/CD pipelines for continuous security validation.

Responsibilities

Deploy and manage security platforms (e.g., Snyk, Black Duck, Mend, Veracode, Checkmarx ONE).
Embed security guardrails into build pipelines (Jenkins, GitHub Actions, GitLab CI).
Analyze vulnerabilities for exploitability, reachability, and impact.
Prioritize findings to focus remediation on high-risk issues.
Develop and enforce open-source governance policies.
Provide security guidance to development teams.