Senior Security Engineer — Shift-Left SDLC & AI

Highmark Health; Alton (IL); On-site; USD 148,000 - 181,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to embed security into the software development lifecycle, from code to production. You will drive shift-left security, governance, and AI tooling protections across enterprise platforms.

You will enable secure-by-default development, lead vulnerability remediation, and work with architecture teams to implement guardrails and KPI-driven security metrics.

Qualifications

• Bachelor's degree in Computer Science or related field.
• Master's degree in CS or Information Security.
• 7+ years in information security and risk management.
• Experience with CI/CD security and secure code reviews.
• Knowledge of HIPAA, PCI-DSS, SOC 2 and related governance frameworks.

Responsibilities

• Embed secure development practices across the SDLC.
• Lead vulnerability risk reduction and triage.
• Architect and maintain enterprise application security toolchain.
• Partner with AI governance, architecture and risk teams.
• Deliver security training and reference materials.

Skills

Security engineering

Shift-left security

Threat modeling

CI/CD security

AI security

Vulnerability triage

Security governance

Security training

Code review

Cloud security

Education

Bachelor's degree in Computer Science or related field

Master's degree in Computer Science or Information Security

Tools

GitLab Ultimate

JFrog Xray

Jenkins

OWASP SAMM

SCA/Dependency Scanning

Job description

Highmark Health is seeking a Senior Security Engineer to embed security into the software development lifecycle, from code to production. You will drive shift-left security, governance, and AI tooling protections across enterprise platforms.

You will enable secure-by-default development, lead vulnerability remediation, and work with architecture teams to implement guardrails and KPI-driven security metrics.