SCA & AppSec Engineer — Secure Software Supply Chain

Zelis Healthcare, LLC; Plano (TX); Hybrid; USD 127,000 - 160,550; Full time

Benefits offered by this job

401k with employer match

Health benefits

Job summary

Zelis Healthcare, LLC is seeking an experienced Application Security Engineer focusing on Software Composition Analysis (SCA) to strengthen the software supply chain. You will work with CI/CD pipelines, triage vulnerabilities, and implement security controls across the SDLC.

Ideal candidates have extensive AppSec experience, implementation skills for SCA tooling, and familiarity with AI/LLM-based security scanning tools. Strong collaboration with developers and engineering teams is essential.

Qualifications

• 8+ years of experience across AppSec domains.
• Experience integrating SCA into CI/CD pipelines and vulnerability triage.
• Experience with open-source governance and license compliance.

Responsibilities

• Lead implementation and optimization of SCA solutions across enterprise apps.
• Integrate and automate SCA tools within CI/CD pipelines for continuous security validation.
• Analyze vulnerabilities to determine exploitability and business impact.
• Develop and enforce open-source governance policies.
• Provide security guidance to development teams.

Skills

AppSec experience

SCA

CI/CD

Vulnerability management

Open-source governance

Java

Python

C++

Ruby

Jenkins

GitHub Actions

GitLab CI

Education

Bachelor's degree

Tools

Synk

Black Duck

Mend

Veracode

Checkmarx ONE

Artifactory

Jenkins

GitHub Actions

GitLab CI

Job description

Zelis Healthcare, LLC is seeking an experienced Application Security Engineer focusing on Software Composition Analysis (SCA) to strengthen the software supply chain. You will work with CI/CD pipelines, triage vulnerabilities, and implement security controls across the SDLC.

Ideal candidates have extensive AppSec experience, implementation skills for SCA tooling, and familiarity with AI/LLM-based security scanning tools. Strong collaboration with developers and engineering teams is essential.