Senior Security Engineer: Secure SDLC & AI Security

Highmark Health; Raleigh (NC); On-site; USD 103,000 - 165,000; Full time

Job summary

enGen seeks a Senior Security Engineer to join our Enterprise Application Security team and drive shift-left security across the SDLC. You will design guardrails, embed security into pipelines, and collaborate with developers to reduce risk before production.

This high-impact role focuses on AI-assisted development, governance, and secure by-default practices. You will lead adoption of security controls, metrics, and tooling to scale across a large engineering org and mature our security posture

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, or closely related field.
• Experience with CI/CD security policy enforcement in enterprise environments.
• Familiarity with AI security concepts and secure AI development practices.

Responsibilities

• Lead teams in clearly defining requirements, deliverables and timeframes.
• Conduct root cause analysis to identify and resolve complex problems.
• Develop and deliver technical training; mentor less senior staff.
• Complete project tasks to enable on-time delivery of ISRM projects.
• Implement, monitor, configure, and maintain security systems.
• Ensure compliance with standards, procedures, and processes.

Skills

Security engineering

Shift-left security

Developer enablement

Automation

Threat modeling

Education

Bachelor's Degree in CS/IS

Tools

SAST

DAST

SCA/Dependency Scanning

Container Scanning

Secret Detection

API Security Testing

GitLab

GitHub Actions

Jenkins

Job description

enGen seeks a Senior Security Engineer to join our Enterprise Application Security team and drive shift-left security across the SDLC. You will design guardrails, embed security into pipelines, and collaborate with developers to reduce risk before production.

This high-impact role focuses on AI-assisted development, governance, and secure by-default practices. You will lead adoption of security controls, metrics, and tooling to scale across a large engineering org and mature our security posture