Application Security Engineer

Zelis is hiring an Application Security Engineer to work in collaboration with the corporate application development teams. The position will be accountable for application security of corporate applications. Youll work with Application Development teams to identify application assets data flows threats and required cyber security controls as well as with Application Security Testers to measure the effectiveness of identified cyber security controls.

Location and Workplace Flexibility:We have offices in Atlanta GA Boston MA Morristown NJ Plano TX St. Louis MO St. Petersburg FL and Hyderabad India. We foster a hybrid and remote friendly culture and all of our employees work locations are based on the needs of the position and determined by the Leadership team. Inoffice work and activities if applicable vary based on the work and team objectives in accordance with Company policies.

Responsibilities:

• Partner closely with corporate stakeholders to understand regulatory industry and organizational security requirements
• Provide security requirements with acceptance criteria to application development teams using the Agile and Waterfall methodologies
• Conduct threat modeling exercises to identify potential security vulnerabilities in corporate applications
• Analyze applications components data flows and external dependencies to anticipate and mitigate threats
• Review the architecture of software applications to ensure that security is integrated at every layer including network infrastructure and application levels
• Implement security controls and best practices to address identified risks and vulnerabilities including encryption authentication access controls input validation and other security mechanisms
• Perform security code reviews to identify and remediate security vulnerabilities in application code. Look for common security flaws such as injection attacks crosssite scripting (XSS) and insecure configurations
• Provide guidance and training to development teams on secure coding practices security principles and relevant security tools and technologies
• Evaluate and implement security tools and automation solutions to enhance the security posture of applications and streamline security processes

Qualifications

• Bachelors degree in Cyber Security (or) related degree and experience
• 4 years of experience in Cyber Security
• 2 years of experience in Agile and writing user stories
• 2 years of experience in Application Security and Threat Modeling as well as application development or application secure code review
• Understanding of API and Web security vulnerabilities
• 2 years of experience using Octave or Stride
• Experience working within a DevSecOps environment

Preferred Qualifications

• Experience in security coding source code management and/or build and deployment technologies
• Experience with web application firewalls
• Familiarity with OWASP Top 10 API Web and Mobile Application Security Risks
• Familiarity with MITRE CWE Top 25 Most Dangerous Software Weaknesses
• CDP CISSP ECDE or other relevant certifications
• Familiarity with regulatory controls and industry best practices such as HIPAA PCI CIS HiTrust ISO 27001 NIST etc.

Zelis is modernizing the healthcare financial experience by providing a connected platform that bridges the gaps and aligns interests across payers providers and healthcare consumers. This platform serves more than 750 payers including the top 5 national health plans BCBS insurers regional health plans TPAs and selfinsured employers and millions of healthcare providers and consumers. Zelis sees across the system to identify optimize and solve problems holistically with technology built by healthcare experts driving real measurable results for clients.

Commitment to Diversity EquityInclusion and Belonging
At Zelis we champion diversity equity inclusion and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis but also to your ability to bring your best each day.

Equal Employment Opportunity
Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws.

We encourage members of traditionally underrepresented communities to apply even if you do not believe you 100 fit the qualifications of the position including women LGBTQIA people people of color and people with disabilities.

Accessibility Support

We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability or a disabled veteran and require a reasonable accommodation with any part of the application and/or interview process please email .

SCAM ALERT: There is an active nationwide employment scam which is now using Zelis to garner personal information or financial scams. This site is secure and any applications made here are with our legitimate partner. If youre contacted by a Zelis Recruiter please ensure whomever is contacting you truly represents Zelis Healthcare. We will never asked for the exchange of any money or credit card details during the recruitment process. Please be aware of any suspicious email activity from people who could be pretending to be recruiters or senior professionals at Zelis.