Senior Secure SDLC Engineer | Shift-Left & AI Security

Highmark Health; Montana; On-site; USD 120,000 - 180,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team. You will help embed security into the software development lifecycle, working with engineering to shift-left security from first line of code to production deployment.

You will lead the toolchain, enforce gates, and drive vulnerability risk reduction across the organization, enabling secure AI-enabled development and scalable security governance.

Qualifications

• Bachelor's degree in CS, IS, or closely related field.
• 10+ years in information security and risk management desirable.
• Experience with CI/CD security gates and secure development practices.
• Knowledge of AI security governance and secure-by-default CD pipelines.

Responsibilities

• Lead shift-left security controls across SDLC and CI/CD pipelines.
• Architect and maintain the enterprise security toolchain and guardrails.
• Drive vulnerability triage, remediation SLAs, and risk-based prioritization.
• Develop security-as-code policies and enforcement rules.
• Collaborate with AI development platforms and developer tooling teams.
• Define and report security KPIs and AI security metrics.

Skills

Security engineering

Security architecture

DevSecOps / SDLC

AI security culture

Vulnerability management

Security automation

Threat modeling

Security governance

Security metrics & KPIs

Education

Bachelor's Degree in Computer Science or related field

Tools

GitLab

GitHub Actions

Jenkins

JFrog Xray

SAST/DAST tooling

OWASP ZAP / Dependency checks

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team. You will help embed security into the software development lifecycle, working with engineering to shift-left security from first line of code to production deployment.

You will lead the toolchain, enforce gates, and drive vulnerability risk reduction across the organization, enabling secure AI-enabled development and scalable security governance.