Senior Security Engineer - Shift-Left AI & SDLC Security

Highmark Health; Washington (District of Columbia); On-site; USD 103,000 - 165,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to embed security into every stage of the software development lifecycle. You will design guardrails, govern CI/CD pipelines, and drive risk reduction across vuln remediation in a large enterprise setting.

You will partner with software delivery enablement, architecture, and platform teams to implement secure-by-default practices for AI-enabled development, monitor security metrics, and champion secure coding across engineering groups in a Washington,

Qualifications

• Experience leading security in an SDLC context.
• Strong knowledge of SAST/DAST and software supply chain security.
• Experience partnering with engineering and architecture teams.
• Familiarity with AI-assisted development security considerations.

Responsibilities

• Lead shift-left security controls across pipelines and IDEs.
• Design, implement, and enforce security guardrails and gates.
• Manage and tune security scanners, dashboards, and reporting.
• Collaborate with AI tooling teams to secure developers’ workflows.

Skills

Security engineering

Application security

Vulnerability management

Shift-left security

CI/CD security gates

AI security

Security tooling

Security governance

Education

Bachelor's degree in Computer Science or related field

Security certifications (CISSP, OSCP, etc.)

Tools

SAST/DAST/DA/Dependency Scanning

CI/CD tooling (GitLab, GitHub Actions)

SBOMs (CycloneDX/ SPDX)

Container security (Docker/Kubernetes)

Job description

enGen is seeking a Senior Security Engineer to embed security into every stage of the software development lifecycle. You will design guardrails, govern CI/CD pipelines, and drive risk reduction across vuln remediation in a large enterprise setting.

You will partner with software delivery enablement, architecture, and platform teams to implement secure-by-default practices for AI-enabled development, monitor security metrics, and champion secure coding across engineering groups in a Washington,