Senior Security Engineer - Shift-Left SDLC & AI Security

Highmark Health; Maryland; On-site; USD 103,000 - 165,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and embed security into every stage of the software development lifecycle. This role focuses on shift-left security, preventing vulnerabilities before they happen and working closely with engineering to build secure systems at enterprise scale.

The candidate will design guardrails, automate security checks across CI/CD, AI-assisted development, and tooling, and drive risk reduction while enabling

Qualifications

• Bachelor's degree in CS, information systems or related field.
• Experience in information security and risk management.
• Familiarity with SDLC security practices and tooling.

Responsibilities

• Lead teams in clearly defining requirements, deliverables and timeframes.
• Design and implement security guardrails that catch vulnerabilities early in the development process.
• Develop and operate security scanners (SAST, DAST, SCA, container scanning) across the enterprise.
• Build security-as-code policies and enforcement rules for scalable governance.
• Partner with engineering to enable secure-by-default AI development and developer tooling.

Skills

Security engineering

Shift-left security

AI security governance

Developer enablement

Security architecture

Education

Bachelor's Degree in Computer Science, Information Systems, or closely related field

Tools

GitLab

JFrog Xray

GitHub Actions

Jenkins

Kubernetes

CI/CD security

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team and embed security into every stage of the software development lifecycle. This role focuses on shift-left security, preventing vulnerabilities before they happen and working closely with engineering to build secure systems at enterprise scale.

The candidate will design guardrails, automate security checks across CI/CD, AI-assisted development, and tooling, and drive risk reduction while enabling