AppSec & AI Security Engineer - Hybrid

Blue Cross and Blue Shield of Minnesota; Eagan (MN); Híbrido; USD 79.000 - 131.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, and vision insurance

401k

PTO

VPTO

Descripción de la vacante

Blue Cross and Blue Shield of Minnesota is seeking a Security Engineer to strengthen AppSec and AI Security across the software lifecycle. You will integrate security testing into GitLab-based CI/CD, review Terraform deployments, and support protective measures like web application firewalls (WAFs) for applications and APIs, including AI workloads.

You will partner with developers in Java, Python, and Go to drive secure coding practices and reduce vulnerabilities, while aligning with risk,

Formación

• 3+ years of related IT Security professional experience.
• Bachelor’s degree required; in lieu of a degree, two additional years of relevant experience may be accepted.

Responsabilidades

• Identify, assess, and prioritize AppSec and AI Security risks, vulnerabilities, and control gaps across code, dependencies, infrastructure-as-code, and AI workloads.
• Implement, maintain, and improve security controls and automation within GitLab CI/CD workflows.
• Review Terraform configurations for security weaknesses and validate remediation.
• Support WAF protections for internet-facing apps and APIs, including AI-enabled services.
• Collaborate with Java, Python, and Go teams to interpret findings and promote secure coding practices.
• Conduct defined security assessments of applications, APIs, AI solutions, models, and data flows; document results and remediation.

Conocimientos

IT Security

Security risk assessment

Vulnerability management

Educación

Bachelor's degree

Herramientas

Terraform

GitLab

WAFs

Descripción del empleo

Blue Cross and Blue Shield of Minnesota is seeking a Security Engineer to strengthen AppSec and AI Security across the software lifecycle. You will integrate security testing into GitLab-based CI/CD, review Terraform deployments, and support protective measures like web application firewalls (WAFs) for applications and APIs, including AI workloads.

You will partner with developers in Java, Python, and Go to drive secure coding practices and reduce vulnerabilities, while aligning with risk,