Senior Security Engineer – Shift-Left SDLC & AI

Highmark Health; Hydaburg (AK); On-site; USD 140,000 - 190,000; Full time

Job summary

Highmark Health seeks a Senior Security Engineer to embed security into the SDLC and AI-enabled development pipelines. The role focuses on shift-left security, governance, and collaboration with engineering teams to reduce risk enterprise-wide.

You will champion secure-by-default practices, build scalable guardrails, and lead remediation of critical vulnerabilities before production, while advancing AI security capabilities across platforms.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or closely related field.
• 7+ years in Information Security and/or Information Risk Management.
• Experience with CI/CD platforms and security policy enforcement.
• Knowledge of HIPAA, PCI-DSS, SOC 2, NIST CSF, or equivalent.
• Familiarity with AI security risks and secure AI development practices.

Responsibilities

• Design and implement security guardrails across SDLC and AI workflows.
• Deploy and manage application security scanners (SAST, DAST, SCA) and AI security tools.
• Lead risk-based triage and remediation prioritization for vulnerabilities.
• Develop security-as-code policies and governance for AI-enabled tooling.
• Provide hands-on security guidance, reviews, and remediation recommendations to engineering teams.
• Create and maintain secure-by-default AI development standards and reference architectures.

Skills

Shift-left security

Security architecture

CI/CD security

AI security

Vulnerability management

Education

Bachelor's Degree in Computer Science / Information Systems

Master's Degree in Computer Science / Information Security

Tools

GitLab Ultimate

JFrog Xray

CI/CD tooling (Jenkins, GitHub Actions)

Job description

Highmark Health seeks a Senior Security Engineer to embed security into the SDLC and AI-enabled development pipelines. The role focuses on shift-left security, governance, and collaboration with engineering teams to reduce risk enterprise-wide.

You will champion secure-by-default practices, build scalable guardrails, and lead remediation of critical vulnerabilities before production, while advancing AI security capabilities across platforms.