Zelis Healthcare
posted 2 months ago
Zelis is seeking an Application Security Engineer to join our team, focusing on the security of corporate applications. This role involves close collaboration with application development teams to ensure that security is integrated into every aspect of the application lifecycle. The Application Security Engineer will be responsible for identifying application assets, data flows, potential threats, and the necessary cybersecurity controls to protect our applications. You will also work alongside Application Security Testers to evaluate the effectiveness of these controls. In this position, you will partner with corporate stakeholders to understand and implement regulatory, industry, and organizational security requirements. You will provide security requirements with acceptance criteria to application development teams, utilizing both Agile and Waterfall methodologies. Conducting threat modeling exercises will be a key responsibility, allowing you to identify potential security vulnerabilities in corporate applications. You will analyze application components, data flows, and external dependencies to anticipate and mitigate threats effectively. Your role will also include reviewing the architecture of software applications to ensure that security is embedded at every layer, including network, infrastructure, and application levels. You will implement security controls and best practices to address identified risks and vulnerabilities, such as encryption, authentication, access controls, and input validation. Performing security code reviews to identify and remediate vulnerabilities in application code will be essential, as will providing guidance and training to development teams on secure coding practices and relevant security tools. Additionally, you will evaluate and implement security tools and automation solutions to enhance the security posture of applications and streamline security processes. This position is crucial in maintaining the integrity and security of our applications, ensuring that we meet the highest standards of cybersecurity in the healthcare payments industry.