Senior Security Engineer - Shift-Left SDLC & AI Security

Highmark Health; Athens (GA); On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health seeks a Senior Security Engineer to join the Enterprise Application Security team, embedding security into the software lifecycle—from code to production. You will drive shift-left security, build guardrails, and enable developers with secure AI-enabled workflows at enterprise scale.

Ideal candidates combine security engineering, architecture, developer enablement, and automation to reduce risk and accelerate secure delivery across health and insurance platforms.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or closely related field.
• 7+ years of information security, information risk management, or related experience.
• Experience integrating security into SDLC and DevOps pipelines.
• Strong knowledge of SAST, DAST, SCA, container security and AI security considerations.

Responsibilities

• Lead initiatives to embed security early in the software development lifecycle.
• Design, implement, and enforce security guardrails across CI/CD pipelines.
• Develop security-as-code policies and governance for AI-enabled development.
• Partner with engineering teams to reduce vulnerability risk and track remediation.
• Provide security guidance, training, and reference architectures for developers.

Skills

Security architecture

Threat modeling

Secure SDLC

Security automation

CI/CD security

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA / Dependency Scanning

Container Scanning

Secret Detection

CI/CD tooling (GitLab, Jenkins)

JFrog Xray

Job description

Highmark Health seeks a Senior Security Engineer to join the Enterprise Application Security team, embedding security into the software lifecycle—from code to production. You will drive shift-left security, build guardrails, and enable developers with secure AI-enabled workflows at enterprise scale.

Ideal candidates combine security engineering, architecture, developer enablement, and automation to reduce risk and accelerate secure delivery across health and insurance platforms.