Senior Security Engineer: Secure SDLC & AI Governance

Highmark Health; Central City (NE); On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team. This high-impact role embeds security into the software development lifecycle, from the first line of code to production deployment, enabling shift-left practices across engineering squads.

You will design guardrails, implement security scanning, and define governance for AI-enabled development, driving remediation with measurable security metrics in a large enterprise environment.

Qualifications

• Requires US citizenship due to contractual/access requirements.
• Senior Security Engineer to embed security into the SDLC across engineering teams.

Responsibilities

• Design and enforce shift-left security controls across CI/CD pipelines.
• Lead vulnerability triage and remediation using EPSS, KEV, and AI-specific risk signals.
• Develop security-as-code policies and governance for AI-enabled development.
• Automate tooling and dashboards to provide real-time security posture visibility.

Skills

Security engineering

Security architecture

Developer enablement

Automation

CI/CD security

Threat modeling

Vulnerability management

Education

Bachelor's degree in Computer Science / Information Systems

Master's degree in CS / InfoSec (preferred)

Tools

GitLab

JFrog Xray

SAST/DAST tools

OWASP SAMM/NIST frameworks

Jenkins / CI tools

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team. This high-impact role embeds security into the software development lifecycle, from the first line of code to production deployment, enabling shift-left practices across engineering squads.

You will design guardrails, implement security scanning, and define governance for AI-enabled development, driving remediation with measurable security metrics in a large enterprise environment.