Senior Security Engineer: Shift-Left DevSec Leader

Highmark Health; Salt Lake City (UT); On-site; USD 120,000 - 180,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and help embed security into every stage of the software development lifecycle. This role emphasizes shift-left practices, security tooling, and collaboration with engineering to prevent vulnerabilities before production.

The ideal candidate will drive guardian controls across CI/CD, manage scanners (SAST/DAST/Container/Secret), and partner with delivery teams to implement secure AI-enabled

Qualifications

• US citizenship required due to contractual/access requirements.
• Bachelor's degree in Computer Science, Information Systems, or closely related field.
• 7 years of relevant experience in security engineering or an equivalent role.

Responsibilities

• Lead teams in clearly defining requirements, deliverables and timeframes.
• Conduct root cause analysis to identify and resolve complex problems impacting ISRM Infrastructure.
• Develop and/or deliver technical training in complex technical areas and mentor staff.
• Complete project tasks to enable on-time delivery of ISRM Infrastructure projects.
• Implement, monitor, configure, and maintain security systems.
• Assure compliance to required standards, procedures, guidelines and processes.

Skills

Security engineering

Shift-left security

DevSecOps

Cloud security

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA

CI/CD pipelines

GitLab

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and help embed security into every stage of the software development lifecycle. This role emphasizes shift-left practices, security tooling, and collaboration with engineering to prevent vulnerabilities before production.

The ideal candidate will drive guardian controls across CI/CD, manage scanners (SAST/DAST/Container/Secret), and partner with delivery teams to implement secure AI-enabled