2 months ago
Morristown, NJ, USASenior
Base Salary
$127k - $161k/yr
Responsibilities
- Lead implementation and optimization of Software Composition Analysis solutions for vulnerabilities, license compliance, and software supply chain risks.
- Establish and maintain processes for managing open-source and third-party software dependencies.
- Integrate and automate SCA and application security tools within CI/CD pipelines.
- Deploy and manage platforms including Snyk, Black Duck, Mend, Veracode, and Checkmarx ONE.
- Embed security guardrails into build pipelines using Jenkins, GitHub Actions, or GitLab CI, with desirable Artifactory integration experience.
- Analyze vulnerabilities for exploitability, reachability, and business impact; prioritize remediation based on risk.
- Validate findings to reduce false positives and improve vulnerability management.
- Develop, maintain, and enforce open-source software governance policies.
- Provide technical guidance, secure coding advice, and best practices to development teams.
Requirements
- 8+ years of experience across application security domains.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
- Strong proficiency in multiple programming languages, including Java, Python, C++, and Ruby.
- Strong understanding of third-party package ecosystems including npm for JavaScript, pip for Python, and Maven/Gradle for Java.
- Knowledge of application security best practices and standards including OWASP Top 10, SSDLC, software supply chain security principles, and vulnerability management frameworks.
- Excellent communication, analytical thinking, and problem-solving skills.
- Self-motivated with a commitment to continuous learning and staying current with evolving security threats and technologies.
- Experience with AI/LLM-focused security scanning tools and emerging application security technologies is desirable.
- Artifactory integration experience in pipelines and developer workflows is desirable.
Benefits
- Base salary range is $127,000.00-$160,550.00, excluding this benefits summary's compensation figures from benefit details.
- Benefits may include a 401(k) plan with employer match, flexible paid time off, holidays, parental leave, life and disability insurance, and medical, dental, vision, and prescription drug coverage.
- The role uses a flexible hybrid approach, with in-office presence guided by team and business needs rather than a fixed weekly schedule.
- Candidates within approximately 50 miles of a U.S. office are generally preferred.
Tech Stack
Categories
About Zelis
Zelis builds a connected healthcare payments and pricing platform for U.S. payers, providers, and consumers, offering payment integrity, claims pricing/bill review, electronic payments, and network optimization. It sells software and managed services to health plans, TPAs, and self-insured employers to reduce claims errors and streamline reimbursement. Privately held and headquartered in Boston, it serves over 750 payers, including the top five national health plans, and millions of healthcare professionals and consumers.