Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; Vermont; On-site; USD 103,000 - 165,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join the Enterprise Application Security team and embed security into our software development lifecycle. This role emphasizes shift-left security, embedding security into code, AI-assisted development workflows, IDEs, and CI/CD pipelines, ensuring production-readiness of software across the enterprise.

As a high-impact engineering position, you will partner with engineering teams to prevent vulnerabilities, build secure-by-default

Qualifications

• Bachelor’s degree in Computer Science or related field; CS/InfoSec preferred.
• 7+ years in information security and secure software delivery lifecycle.
• Experience with CI/CD security and security tooling across pipelines.

Responsibilities

• Lead shift-left security controls across SDLC and CI/CD pipelines.
• Develop and enforce security guardrails for AI-assisted development.
• Lead vulnerability triage, remediation, and metric reporting.
• Architect and maintain enterprise application security toolchain.
• Provide security guidance and training to engineering teams.

Skills

Security engineering

CI/CD security

Threat modeling

AI/ML security

Secure SDLC

Cloud security

Education

Bachelor's degree in Computer Science or related field

Master's degree in Computer Science or related field

Tools

GitLab security features

JFrog Xray

SAST/DAST tooling

Job description

Highmark Health is seeking a Senior Security Engineer to join the Enterprise Application Security team and embed security into our software development lifecycle. This role emphasizes shift-left security, embedding security into code, AI-assisted development workflows, IDEs, and CI/CD pipelines, ensuring production-readiness of software across the enterprise.

As a high-impact engineering position, you will partner with engineering teams to prevent vulnerabilities, build secure-by-default