Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; Clayton (MO); On-site; USD 103,000 - 165,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and help embed security into every stage of the software development lifecycle at an enterprise scale. This role is pivotal for building security in from the first line of code to production deployment.

Highmark Health is the client organization, focusing on shift-left security, automation, and governance across AI-enabled development platforms.

Qualifications

• Bachelor's degree in CS/IS or a closely related field.
• 7+ years in information security, risk management or IT.
• Experience with secure SDLC and secure coding practices.
• Experience with CI/CD security tooling and policy enforcement.
• Knowledge of healthcare regulatory frameworks is a plus.

Responsibilities

• Lead security engineering initiatives to embed security into the SDLC.
• Design and enforce shift-left security controls across pipelines.
• Manage security scanners and tooling across enterprise development platforms.
• Provide security guidance and remediation recommendations to engineering teams.
• Define and track security KPIs and reporting for leadership.

Skills

Shift-left security

AppSec engineering

Security automation

Vulnerability management

CI/CD security

Threat modeling

Secure coding practices

Security gates

Security championing

Security metrics

Education

Bachelor's Degree in Computer Science/Information Systems or related

Tools

GitLab

GitHub Actions

Jenkins

JFrog Xray

SAST/DAST/DA等

OWASP tooling

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and help embed security into every stage of the software development lifecycle at an enterprise scale. This role is pivotal for building security in from the first line of code to production deployment.

Highmark Health is the client organization, focusing on shift-left security, automation, and governance across AI-enabled development platforms.