Hybrid AppSec & AI Security Engineer

BCBSM, Inc.; United States; Hybrid; USD 79,000 - 131,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401k

PTO

VPTO

Job summary

Blue Cross and Blue Shield of Minnesota is hiring a Security Engineer to strengthen AppSec and AI Security programs. You will identify and reduce risk across software and AI lifecycles, integrate security into GitLab-based workflows, and work with Java, Python, and Go teams to remediate vulnerabilities.

The role emphasizes secure coding practices, collaboration with cross-functional teams, and alignment with compliance objectives in a hybrid work environment.

Qualifications

• 3+ years of related IT Security professional experience.
• Bachelor’s degree; in lieu of a degree, an additional two years of relevant experience beyond the qualifications listed above may be accepted.
• Knowledge of information security practices, risk management principles, and regulatory/compliance requirements.
• Ability to communicate complex topics clearly and concisely, actively listen to stakeholders, and align others to drive informed decisions.
• Experience supporting AppSec, secure coding practices, and risk-based remediation.

Responsibilities

• Identify, assess, and prioritize AppSec and AI Security risks, vulnerabilities, and control gaps across applications, code, dependencies, infrastructure as code, and AI workloads.
• Implement, maintain, and improve security controls and automation within GitLab development and CI/CD workflows to identify issues earlier and streamline remediation.
• Review Terraform configurations and cloud deployment patterns for security weaknesses, policy violations, and control gaps; validate remediation.
• Support the configuration, monitoring, and improvement of WAF protections for internet-facing applications and APIs.
• Collaborate with engineering teams in Java, Python, and Go to interpret scanning results, recommend practical remediation, and promote secure coding practices.
• Conduct defined security assessments of applications, APIs, AI solutions, models, agents, and data flows; document results and track remediation.

Skills

AppSec knowledge

AI security

Security scanning

GitLab CI/CD

Education

Bachelor's degree

Tools

GitLab CI/CD

Job description

Blue Cross and Blue Shield of Minnesota is hiring a Security Engineer to strengthen AppSec and AI Security programs. You will identify and reduce risk across software and AI lifecycles, integrate security into GitLab-based workflows, and work with Java, Python, and Go teams to remediate vulnerabilities.

The role emphasizes secure coding practices, collaboration with cross-functional teams, and alignment with compliance objectives in a hybrid work environment.