Senior SCA & AppSec Engineer for Secure CI/CD

Zelis; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Zelis is seeking an experienced Application Security Engineer to strengthen our software supply chain by integrating SCA tools into CI/CD pipelines and collaborating with development teams to triage vulnerabilities. You will drive secure coding practices and OSS governance across enterprise applications.

The ideal candidate has 8+ years in AppSec, hands-on experience with SCA platforms, and a strong background in Java, Python, C++, and Ruby, plus familiarity with AI/LLM-based scanning tools.

Qualifications

• Proven experience leading SCA solutions across enterprise apps.
• Experience integrating SCA tools into CI/CD pipelines.
• Strong knowledge of OSS governance and license compliance.
• Familiarity with AI/LLM-based security scanning is a plus.
• Proficient in multiple languages and secure SDLC practices.

Responsibilities

• Lead SCA solution implementation and optimization across apps.
• Automate SCA and app security in CI/CD pipelines for continuous validation.
• Assess vulnerability exploitability and risk-based prioritization.
• Embed security guardrails in build pipelines (Jenkins, GitHub Actions, GitLab).
• Guide developers on secure coding and open-source governance.
• Analyze findings and reduce false positives in assessments.
• Collaborate with teams to embed security controls in SDLC.

Skills

AppSec experience

CI/CD security

Java

Python

C++

Ruby

Vulnerability analysis

Threat modeling

Education

Bachelor's degree in CS/IT/Cybersecurity/Engineering

Tools

Synk

Black Duck

Mend

Veracode

Checkmarx ONE

Jenkins

GitHub Actions

GitLab CI

Artifactory

Job description

Zelis is seeking an experienced Application Security Engineer to strengthen our software supply chain by integrating SCA tools into CI/CD pipelines and collaborating with development teams to triage vulnerabilities. You will drive secure coding practices and OSS governance across enterprise applications.

The ideal candidate has 8+ years in AppSec, hands-on experience with SCA platforms, and a strong background in Java, Python, C++, and Ruby, plus familiarity with AI/LLM-based scanning tools.