HireFT
Browse JobsHow it worksPricingAboutSuccess Stories
    Back to jobs
    ZE

    Zelis

    Healthcare Information Technology

    Application Security Engineer – Software Composition Analysis (SCA)

    US TX Plano, United StatesOn-SiteFull-time$127k – $160.6k / yearPosted 1mo ago
    All Zelis jobs

    Job description

    At Zelis, we Get Stuff Done. So, let’s get to it!

    A Little About Us

    Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.

    At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.

    A Little About You

    You bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.

    Position Overview

    Zelis is seeking an experienced Application Security Engineer with deep expertise in Software Composition Analysis (SCA) to strengthen the security of our software supply chain and reduce risks associated with open-source and third-party software components in internally developed applications. This role will help integrate scanning tools into CI/CD pipelines and partner with developers, engineering teams to triage vulnerabilities to embed security controls throughout the software development lifecycle.
    The ideal candidate will have extensive experience integrating SCA and application security tooling into CI/CD pipelines, evaluating vulnerability exploitability, managing open-source license compliance, and enabling developers to build secure applications at scale. Experience with AI/LLM-focused security scanning tools and emerging application security technologies is highly desirable.

    Key Responsibilities :

    • 8+ years of experience in various AppSec domains
    • Lead the implementation and optimization of Software Composition Analysis (SCA) solutions to identify vulnerabilities, license compliance issues, and software supply chain risks across enterprise applications.
    • Establish and maintain processes for managing risks associated with open-source and third-party software dependencies.
    • Integrate and automate SCA and application security tools within CI/CD pipelines to provide continuous security validation throughout the software development lifecycle.
    • Deploy and manage security platforms such as Synk, Black Duck, Mend, Veracode, Checkmarx ONE, experience with any emerging AI/LLM-based security scanning solutions would be desirable.
    • Experience embedding security guardrails into build pipelines using tools like Jenkins, GitHub Actions, or GitLab CI. Artifactory integration experience in the pipeline and developer workflows would be desirable.
    • Analyze identified vulnerabilities to determine exploitability, reachability, and potential business impact.
    • Perform risk-based prioritization of findings, focusing remediation efforts on vulnerabilities that pose the greatest threat to the organization.
    • Validate findings to reduce false positives and improve overall vulnerability management effectiveness.
    • Develop, maintain, and enforce open-source software governance policies.
    • Provide technical guidance, security coding and best practices to development teams.
    • Strong proficiency in multiple programming languages, including Java, Python, C++, Ruby
    • Strong understanding of how third-party packages are integrated through external public repos(e.g., npm for JavaScript, pip for Python, Maven/Gradle for Java).
    • Knowledge of application security best practices and industry standards, including OWASP Top 10, Secure Software Development Lifecycle (SSDLC), Software Supply Chain Security principles, Vulnerability Management frameworks

    Professional Skills :

    • Excellent communication, strong analytical thinking and problem-solving capabilities.
    • Self-motivated with a commitment to continuous learning and staying current with evolving security threats and technologies.

    Education :

    • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.

    Please note at this time we are unable to proceed with candidates who require visa sponsorship now or in the future.

    Location and Workplace Flexibility

    Zelis is headquartered in the U.S., with multiple locations across the country and in Hyderabad, India. Check out our locations to learn more about our offices. All employee work locations are based on the needs of the position and are determined by the Leadership team. In-office work and activities vary based on work and team objectives in accordance with Company policies.

    While location expectations vary by role, candidates within approximately 50 miles of a U.S. office are generally preferred to support collaboration when needed. Our hybrid approach is flexible, and in-office presence is guided by team and business needs rather than a fixed weekly schedule.

    Base Salary Range

    $127,000.00 - $160,550.00

    At Zelis we are committed to providing fair and equitable compensation packages. The base salary range allows us to make an offer that considers multiple individualized factors, including experience, education, qualifications, as well as job-related and industry-related knowledge and skills, etc. Base pay is just one part of our Total Rewards package, which may also include discretionary bonus plans, commissions, or other incentives depending on the role.

    Zelis’ full-time associates are eligible for a highly competitive benefits package as well, which demonstrates our commitment to our employees’ health, well-being, and financial protection. The US-based benefits include a 401k plan with employer match, flexible paid time off, holidays, parental leaves, life and disability insurance, and health benefits including medical, dental, vision, and prescription drug coverage.

    Equal Employment Opportunity
    Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
    We welcome applicants from all backgrounds and encourage you to apply even if you don’t meet 100% of the qualifications for the role. We believe in the value of diverse perspectives and experiences and are committed to building an inclusive workplace for all.

    Accessibility Support
    We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability or a disabled veteran and require a reasonable accommodation with any part of the application and/or interview process, please email [email protected].

    Disclaimer

    The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities, duties, and skills from time to time.

    Job details are sourced from the employer's original posting.

    Open job posting
    ZE

    About the company

    Zelis

    Zelis is a healthcare information technology company and market-leading provider of end-to-end healthcare claims cost management and payment solutions. Inc.5000 award winner: One of the fastest growing privately held companies in the US! Ranked #1 by NJ Biz as the Fastest Growing Company in NJ! COMPANY BACKGROUND/CULTURE Zelis Healthcare is a market-leading healthcare technology company providing integrated healthcare cost management and payments solutions including network analytics and design, network access and cost management, claims cost management and electronic payments to payers, healthcare providers and consumers in the medical, dental and workers’ compensation markets nationwide. Zelis Healthcare is backed by Parthenon Capital Partners.

    View all Zelis jobs
    Industry
    Healthcare Information Technology
    Open roles
    100

    Interested in this role?

    Apply with HireFT

    Free to start — no card required.

    Your fit

    How well do you match?

    Sign in to see how your résumé lines up with this role.