Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; Milton (MA); On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and shape security in our software lifecycle. This role emphasizes shift-left security, embedding security into code and CI/CD pipelines, and enabling developers with practical remediation guidance.

The position focuses on automating security controls, triaging vulnerabilities, and driving governance for AI-enabled development across enterprise platforms. A security-first mindset is essential.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or closely related field.
• Master's degree in Computer Science or Information Security preferred.
• Experience with CI/CD security tooling and securing AI-assisted development is a plus.

Responsibilities

• Lead design and enforcement of shift-left security controls across SDLC.
• Develop security-as-code policies and governance for AI-enabled development.
• Automate vulnerability triage, escalation, and reporting to reduce manual overhead.
• Enable developers by embedding security advisory and training.
• Measure and report on AppSec metrics and AI security posture.

Skills

Shift-left security

Security architecture

Developer enablement

Automation

Education

Bachelor's Degree in Computer Science

Master's Degree in Computer Science or Information Security

Tools

SAST

DAST

SCA/Dependency Scanning

Container Scanning

Secret Detection

JFrog Xray

GitLab/GitHub security features

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and shape security in our software lifecycle. This role emphasizes shift-left security, embedding security into code and CI/CD pipelines, and enabling developers with practical remediation guidance.

The position focuses on automating security controls, triaging vulnerabilities, and driving governance for AI-enabled development across enterprise platforms. A security-first mindset is essential.