Senior Security Engineer - Shift-Left SDLC & AI Security

Highmark Health; Pennsylvania; On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and drive shift-left security across the software development lifecycle. You will embed security in code, pipelines, and AI-enabled workflows to prevent vulnerabilities before they happen.

Lead risk-based triage, enforce remediation SLAs, and collaborate with engineering to build secure-by-default platforms and tools that scale enterprise security across AI-enabled applications.

Qualifications

• Bachelor's degree in a related field required.
• Experience leading security engineering in SDLC and DevOps.
• Strong hands-on knowledge of SAST/DAST, SBOMs, and SBOMs.

Responsibilities

• Lead security engineering across SDLC with shift-left approach.
• Design and enforce security guardrails in CI/CD, IDEs, and AI workflows.
• Triage vulnerabilities and track remediation SLAs with KPIs.
• Collaborate with engineering to embed secure-by-default practices.

Skills

CI/CD security

SAST/DAST

AI security

Threat modeling

Security governance

Vulnerability management

GitLab/GitHub Actions

Security architecture

Education

Bachelor's Degree in Computer Science, Information Systems, or closely related field

Tools

GitLab

JFrog Xray

OWASP Top 10 for LLM Applications

CI/CD tooling

AI security tooling

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and drive shift-left security across the software development lifecycle. You will embed security in code, pipelines, and AI-enabled workflows to prevent vulnerabilities before they happen.

Lead risk-based triage, enforce remediation SLAs, and collaborate with engineering to build secure-by-default platforms and tools that scale enterprise security across AI-enabled applications.