Senior Security Engineer — Shift-Left & AI Security

Highmark Health; Oklahoma City (OK); On-site; USD 103,000 - 165,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and shape how security is built into software — not bolted on after the fact. This high-impact engineering role focuses on shift-left security, embedding security into every stage of the software development lifecycle, from code to production, in collaboration with engineering teams.

Join us to design guardrails, automate security tooling, and empower developers with practical guidance that reduces risk

Responsibilities

• Design and implement security guardrails that catch vulnerabilities at earliest point in the development process, including within AI-assisted development workflows, IDEs, at commit time, and within CI/CD pipelines.
• Configure and enforce pipeline security gates across the enterprise, ensuring code, AI-generated code, infrastructure-as-code, and deployment artifacts cannot advance to production meeting security standards.
• Deploy and manage application security scanners (SAST, Dependency Scanning, Container Scanning, Secret Detection, DAST, API Security Testing) across the enterprise development platform.
• Develop security-as-code policies and enforcement rules that scale across a large, distributed engineering organization.
• Partner with Software Delivery Enablement teams to establish security controls and safe patterns for AI coding assistants and AI-enabled developer tooling.
• Lead risk-based triage and prioritization of detected vulnerabilities using EPSS scores, KEV status, reachability analysis, and AI-specific risk indicators.
• Establish and track remediation SLAs aligned to severity and business risk, eliminating Critical/High findings before production.
• Identify and remediate security risks with AI-generated code, model integrations, prompt injection vulnerabilities, and exposure of data to AI platforms.
• Conduct root cause analysis on recurring vulnerability patterns and drive systemic improvements through tooling and secure development practices.
• Monitor and report on security health metrics including MTTR, debt trends, detection rates, and AI security risk reduction metrics.
• Architect and maintain the enterprise application security toolchain, ensuring integration and high-fidelity signals.
• Evaluate and onboard emerging security technologies that improve visibility over AI-assisted development and software supply chains.
• Build automation workflows for vulnerability triage, escalation, assignment, and reporting to accelerate response times.
• Continuously optimize scanner configurations to minimize false positives and maximize detection accuracy.
• Develop dashboards and reporting pipelines for real-time visibility into application security posture and AI governance.

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and shape how security is built into software — not bolted on after the fact. This high-impact engineering role focuses on shift-left security, embedding security into every stage of the software development lifecycle, from code to production, in collaboration with engineering teams.

Join us to design guardrails, automate security tooling, and empower developers with practical guidance that reduces risk