Sr SCA Engineer
Zelis (company site, opens in a new tab)8–10 yrsHyderabadOn-siteDirect career pageEst. 22–36 LPA
Posted 15h ago
Reach people at Zelis
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Zelis you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own and drive the Software Composition Analysis (SCA) program end-to-end including vulnerability and license risk management in open-source and third-party dependencies.
- Configure, manage, and optimize artifact repositories/package registries with embedded SCA scanning and enforce dependency governance policies.
- Integrate and manage SAST and DAST tools within CI/CD pipelines, conduct vulnerability triage and remediation tracking, and promote secure development lifecycle practices.
Minimum Requirements
- 8 to 10 years of relevant experience in Application Security, DevSecOps, or related field.
- Hands-on experience with 2-3 artifact repository/package registry tools (e.g., JFrog Artifactory/Xray, Sonatype Nexus, Azure Artifacts).
- Working knowledge of SAST and DAST tools (e.g., Veracode, Checkmarx, OWASP ZAP) and CI/CD tools (Jenkins, GitLab CI, etc.).
- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent practical experience).
Ideal Candidate Profile
- Experienced professional with strong practical expertise in open-source dependency risk management and artifact repository administration.
- Proficient in integrating security tools into DevSecOps pipelines, driving vulnerability remediation across engineering teams.
- Familiar with security frameworks and standards, vulnerability classifications (OWASP Top 10, CWE/SANS Top 25), and working in Agile/DevOps environments.