Senior AppSec Engineer: SCA & Software Supply Chain

Zelis Healthcare, LLC; Morris Township (NJ); Hybrid; USD 127,000 - 161,000; Full time

Benefits offered by this job

401(k) with company match

Flexible PTO

Holidays

Parental leave

Life & disability insurance

Medical, dental, vision, Rx

Job summary

Zelis Healthcare, LLC is seeking an experienced Application Security Engineer to strengthen our software supply chain security. You will embed SCA in CI/CD, triage vulnerabilities, and collaborate with developers to scale secure coding practices.

The ideal candidate has 8+ years in AppSec, with hands-on experience in SCA tools, vulnerability management, and governance. AI/LLM-based security scanning is highly desirable in a fast-paced, hybrid environment.

Qualifications

• 8+ years of experience in various AppSec domains.
• Experience integrating SCA and application security tooling into CI/CD pipelines.
• Ability to evaluate vulnerability exploitability and manage open-source license compliance.
• Strong understanding of OWASP Top 10 and SSDLC.

Responsibilities

• Lead implementation and optimization of SCA solutions to identify vulnerabilities and license issues.
• Manage risks from open-source dependencies across enterprise apps.
• Integrate SCA and security tools into CI/CD pipelines for continuous security validation.
• Provide guidance on secure coding and security best practices.

Skills

Java

Python

C++

Ruby

Jenkins

GitHub Actions

GitLab CI

SCA tools

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related technical discipline

Tools

Synk

Black Duck

Mend

Veracode

Checkmarx ONE

Artifactory

Job description

Zelis Healthcare, LLC is seeking an experienced Application Security Engineer to strengthen our software supply chain security. You will embed SCA in CI/CD, triage vulnerabilities, and collaborate with developers to scale secure coding practices.

The ideal candidate has 8+ years in AppSec, with hands-on experience in SCA tools, vulnerability management, and governance. AI/LLM-based security scanning is highly desirable in a fast-paced, hybrid environment.