Associate Security Analyst

About Us 

Zelis is modernizing the healthcare financial experience in the United States (U.S.) across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.

At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.

Why We Do What We Do 

In the U.S., consumers, payers, and providers face significant challenges throughout the healthcare financial journey. Zelis helps streamline the process by offering solutions that improve transparency, efficiency, and communication among all parties involved. By addressing the obstacles that patients face in accessing care, navigating the intricacies of insurance claims, and the logistical challenges healthcare providers encounter with processing payments, Zelis aims to create a more seamless and effective healthcare financial system.

Zelis India plays a crucial role in this mission by supporting various initiatives that enhance the healthcare financial experience. The local team contributes to the development and implementation of innovative solutions, ensuring that technology and processes are optimized for efficiency and effectiveness. Beyond operational expertise, Zelis India cultivates a collaborative work culture, leadership development, and global exposure, creating a dynamic environment for professional growth. With hybrid work flexibility, comprehensive healthcare benefits, financial wellness programs, and cultural celebrations, we foster a holistic workplace experience. Additionally, the team plays a vital role in maintaining high standards of service delivery and contributes to Zelis’ award-winning culture. 

Position Overview

We are looking for an Application Security Engineer with around 2 years of experience in application security, focusing on Static Application Security Testing and Dynamic Application Security Testing. The candidate will be responsible for identifying, analyzing, and helping remediate security vulnerabilities in web applications, APIs, and software systems.

Zelis is one of the leading healthcare technology Product organizations with $1.4 Billion revenue with year-on-year growth of 22% and client retention rate of 120%. we offer wide range of innovative solutions to the healthcare payers, providers, and consumers. Our services include network analytics, payment integrity and optimization, provider credentialing, and provider engagement. 

 Zelis is an US based Software Product development organization founded in 1995 with a headcount 2400+ talented professionals working in 7 offices in US and 1 global capacity center located in Hyderabad, India. 

• Perform SAST scans to identify source-code-level vulnerabilities such as SQL injection, XSS, insecure coding practices, hardcoded secrets, and authentication flaws.
• Conduct DAST scans on web applications and APIs to detect runtime security issues.
• Analyze scan results, validate vulnerabilities, remove false positives, and prioritize findings based on severity and business impact.
• Work closely with development teams to explain security issues and recommend secure remediation steps.
• Support secure SDLC activities by integrating security testing into CI/CD pipelines.
• Prepare vulnerability assessment reports and track remediation progress.
• Assist in manual verification of vulnerabilities using tools such as Burp Suite or OWASP ZAP.
• Follow OWASP Top 10, secure coding standards, and application security best practices.
• Participate in security reviews, threat discussions, and application risk assessments.

Required Skills

• Around 2 years of experience in Application Security.
• Hands-on experience with SAST tools such as Checkmarx, Veracode, Fortify, SonarQube, or similar.
• Hands-on experience with DAST tools such as Burp Suite, OWASP ZAP, Acunetix, Netsparker, or similar.
• Good understanding of OWASP Top 10 vulnerabilities.
• Basic knowledge of web technologies such as HTTP, HTTPS, REST APIs, JavaScript, HTML, and web application architecture.
• Ability to analyze security scan results and distinguish true positives from false positives.
• Basic understanding of secure coding practices.
• Good communication skills to coordinate with developers and technical teams.

Preferred Skills

• Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.
• Knowledge of cloud security basics in AWS, Azure, or GCP.
• Familiarity with API security testing.
• Basic scripting knowledge in Python, Bash, or PowerShell.
• Security certifications such as CEH, Security+, or relevant application security certifications are an advantage.

Roles and Responsibilities Summary

The Application Security Engineer will be responsible for conducting SAST and DAST assessments, validating vulnerabilities, preparing reports, coordinating with developers for remediation, and supporting secure software development practices across the organization.

Commitment to Diversity, Equity, Inclusion, and Belonging

At Zelis, we champion diversity, equity, inclusion, and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis, but also to your ability to bring your best each day.

Equal Employment Opportunity

Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Accessibility Support

We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability and require reasonable accommodation with any part of the application and/or interview process, please email [email protected].