Senior Security Engineer: Shift-Left AI & AppSec

Highmark Health; Honolulu (HI); On-site; USD 140,000 - 190,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join the Enterprise Application Security team. You will help embed security into the software development lifecycle, build shift-left security controls, and lead vulnerability risk reduction across AI-enabled and traditional software platforms.

The role emphasizes security engineering at scale, collaboration with engineering teams, and automation to reduce risk before production.

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, or closely related field.
• 7 years of experience in security engineering or equivalent.
• Experience with secure SDLC and shift-left security practices.
• Familiarity with AI security and governance in enterprise environments.
• Strong knowledge of security testing tooling (SAST/DAST/SCA) and container security.

Responsibilities

• Lead & drive enterprise AppSec program initiatives and governance.
• Embed security into software development lifecycle across teams.
• Develop and enforce shift-left security controls and guardrails.
• Manage security scanners across CI/CD pipelines and AI workflows.
• Provide security guidance, training, and remediation recommendations to engineers.

Skills

Security engineering

Architectural security

DevSecOps

AI security

Threat modeling

Education

Bachelor's Degree in Computer Science/Information Systems

Master's Degree in CS/InfoSec

Tools

GitLab Ultimate

JFrog Xray

SAST/DAST/DAST tooling

Container Scanning

Secret Detection

Job description

Highmark Health is seeking a Senior Security Engineer to join the Enterprise Application Security team. You will help embed security into the software development lifecycle, build shift-left security controls, and lead vulnerability risk reduction across AI-enabled and traditional software platforms.

The role emphasizes security engineering at scale, collaboration with engineering teams, and automation to reduce risk before production.