Senior Security Engineer: Shift-Left SDLC & AI Security

Highmark Health; Williamstown (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and play a pivotal role in shaping how security is built into our software — not bolted on after the fact.

This is a high-impact, engineering role for a security professional who is passionate about preventing vulnerabilities before they happen. You will be at the forefront of our shift-left security strategy, embedding security into every stage of the software development lifecycle.

Qualifications

• Experience in secure SDLC and embedding security into development.
• Proven ability to lead security initiatives across large teams.
• Strong knowledge of application security testing and governance.

Responsibilities

• Lead teams in clearly defining requirements, deliverables and timeframes.
• Conduct root cause analysis to identify and resolve complex problems impacting ISRM Infrastructure.
• Develop and/or deliver technical training in complex technical areas.
• Complete project tasks to enable the on time, within budget and scope delivery of ISRM Infrastructure projects.
• Implement, monitor, configure, and maintain security systems.
• Assure compliance to required standards, procedures, guidelines and processes.

Skills

Security engineering

Architecture collaboration

Automation in SDLC

Threat modeling

Vulnerability triage

Education

Bachelor's degree in CS/IS

Tools

SAST

DAST

SCA/Dependency Scanning

Container Scanning

Secret Detection

AI security tooling

Job description

Highmark Health is seeking a Senior Security Engineer to join our Enterprise Application Security team and play a pivotal role in shaping how security is built into our software — not bolted on after the fact.

This is a high-impact, engineering role for a security professional who is passionate about preventing vulnerabilities before they happen. You will be at the forefront of our shift-left security strategy, embedding security into every stage of the software development lifecycle.