Senior Security Engineer - Shift-Left SDLC & AI Security

Highmark Health; Springfield (IL); On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team, shaping how security is built into software—from code to production. You will lead shift-left initiatives, embedding security at every stage of the software development lifecycle and collaborating with engineering teams to prevent vulnerabilities before they occur.

This high-impact engineering role focuses on security engineering, architecture, developer enablement, and automation to deliver

Qualifications

• Bachelor's degree in Computer Science, Information Security, or closely related field.
• Experience designing secure software development lifecycles and governance for AI-enabled applications.
• Proven ability to lead security engineering across CI/CD pipelines and development environments.
• Strong knowledge of SAST, DAST, SCA, container security, and AI-focused security tooling.

Responsibilities

• Lead security gates to prevent non-compliant code from production.
• Embed security into SDLC with AI-enabled development platforms.
• Develop security-as-code policies and enforcement rules.
• Provide hands-on security guidance to engineering teams.

Skills

CI/CD security

SAST/DAST

AI security governance

Security automation

Code review

Security champions

Education

Bachelor's Degree in Computer Science

Tools

GitLab

GitHub Actions

Jenkins

JFrog Xray

OWASP Dependency-Check

Docker

Kubernetes

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team, shaping how security is built into software—from code to production. You will lead shift-left initiatives, embedding security at every stage of the software development lifecycle and collaborating with engineering teams to prevent vulnerabilities before they occur.

This high-impact engineering role focuses on security engineering, architecture, developer enablement, and automation to deliver