Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; Beryl (WV); On-site; USD 140,000 - 190,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team. You will shape how security is built into software, working with engineering to embed security in every stage of the SDLC—from code to production.

This high-impact role focuses on preventing vulnerabilities before they happen, leveraging shift-left strategies, and automating security controls at scale across enterprise development platforms.

Qualifications

• Bachelor’s degree in computer science or related field required; advanced degree preferred.
• 7+ years in information security, with hands-on software delivery experience.
• Experience designing secure SDLC and governance for AI-enabled development.
• Proficiency with security testing tools and software composition analysis.
• Strong collaboration with engineering, architecture, and risk teams.

Responsibilities

• Lead shift-left security controls across SDLC, including AI-assisted development and CI/CD gates.
• Architect and maintain enterprise application security toolchain and guardrails.
• Drive vulnerability risk reduction with KPIs and remediation SLAs.
• Develop security-as-code policies and developer enablement programs.
• Provide security reviews, threat modeling, and remediation guidance to engineering teams.

Skills

Security engineering

Security architecture

Developer enablement

Automation

AI security

CI/CD pipelines

Threat modeling

Security governance

Education

Bachelor's Degree in Computer Science/Information Systems

Master's Degree in CS / Information Security

Tools

GitLab

GitHub Actions

Jenkins

Docker

Kubernetes

SAST/DAST/IAAS tooling

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team. You will shape how security is built into software, working with engineering to embed security in every stage of the SDLC—from code to production.

This high-impact role focuses on preventing vulnerabilities before they happen, leveraging shift-left strategies, and automating security controls at scale across enterprise development platforms.