Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; East Windsor Hill (CT); On-site; USD 150,000 - 180,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and embed security into the software development lifecycle from the first line of code to production. You will lead shift-left security, build guardrails, and partner with engineering teams to prevent vulnerabilities, while enabling AI-enabled development and secure-by-default practices across the enterprise.

This role requires strong collaboration, deep policy knowledge, and the ability to measure

Qualifications

• Minimum 7 years in information security or related fields.
• Experience embedding security into the SDLC and CI/CD pipelines.
• Experience with AI-assisted development security and guardrails.

Responsibilities

• Lead design and implement security guardrails that catch vulnerabilities early in the development process, including AI-assisted workflows.
• Configure and enforce pipeline security gates across the enterprise to prevent non-compliant production releases.
• Deploy and manage application security scanners (SAST, DAST, SCA) and emerging AI security testing.
• Develop security-as-code policies and enforcement rules at scale.
• Partner with Software Delivery Enablement to establish AI security controls and safe usage patterns for AI tools.
• Lead risk-based triage and remediation prioritization of vulnerabilities and track SLAs.
• Build automation workflows to reduce manual overhead and accelerate response times.
• Develop dashboards and reporting pipelines for real-time security visibility.

Skills

Security engineering

Security architecture

AppSec

CI/CD security

Vulnerability management

Threat modeling

AI security

Developer enablement

Education

Bachelor's Degree in Computer Science, Information Systems, or closely related field

Tools

GitLab

GitHub Actions

Jenkins

Docker

Kubernetes

JFrog Xray

SCA/Dependency Scanning

OWASP SAMM

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and embed security into the software development lifecycle from the first line of code to production. You will lead shift-left security, build guardrails, and partner with engineering teams to prevent vulnerabilities, while enabling AI-enabled development and secure-by-default practices across the enterprise.

This role requires strong collaboration, deep policy knowledge, and the ability to measure