Senior Security Engineer, Shift-Left SDLC & AI Security

Highmark Health; North Carolina; On-site; USD 103,000 - 165,000; Full time

Job summary

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team. This high-impact role shapes how security is built into software, embedding security throughout the SDLC and aligning with shift-left principles.

You will work with engineering teams to design guardrails, enforce security gates, and automate security tooling across the enterprise. This role emphasizes collaboration, developer enablement, and measurable risk reduction in a large-scale health-focused

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, or closely related field.
• 7+ years in Information Security and related areas is preferred.
• Experience with CI/CD security gates and secure software development lifecycle.
• Experience with security tooling such as SAST, DAST, SCA, container security, and AI security considerations.

Responsibilities

• Lead design and enforcement of shift-left security controls across SDLC.
• Triage and remediate vulnerabilities with measurable SLAs.
• Automate security toolchains and pipelines for security governance.
• Embed secure-by-default practices in AI-enabled development.
• Provide security guidance, training, and reference architectures for developers.

Skills

Security engineering

CI/CD security

Threat modeling

Automation

DevSecOps

AI security

Education

Bachelor's Degree in Computer Science/Information Systems

Tools

GitLab

GitHub Actions

Jenkins

JFrog Xray

SAST/DAST/DAST

OWASP Dependency-Check

Job description

enGen is seeking a Senior Security Engineer to join our Enterprise Application Security team. This high-impact role shapes how security is built into software, embedding security throughout the SDLC and aligning with shift-left principles.

You will work with engineering teams to design guardrails, enforce security gates, and automate security tooling across the enterprise. This role emphasizes collaboration, developer enablement, and measurable risk reduction in a large-scale health-focused