AI Security Software Engineer

Elevance Health•Tampa, FL

3d•Hybrid

About The Position

The AI Security Software Engineer designs, develops, and implements AI-driven security solutions to assess enterprise applications, analyze source code, and identify vulnerabilities. The role combines software engineering, application security, DevSecOps, and large language model technologies to strengthen security capabilities, automate assessments, and reduce enterprise risk. This hybrid role requires associates to work in an office 1–2 days per week. Alternate locations may be considered for candidates within commuting distance of an office. Candidates outside a reasonable commuting distance will not be considered unless an accommodation is granted as required by law. The position is not eligible for current or future visa sponsorship.

Requirements

BS/BA in Information Technology or a related field and a minimum of 8 years of experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience across multiple technical and business disciplines is required. An equivalent combination of education and experience is accepted.

Nice To Haves

Strong Python development skills, including experience building REST APIs using FastAPI, Flask, Django, or similar frameworks.
Familiarity with asynchronous processing, concurrency, automated testing (pytest), and SQL databases.
Experience developing AI-enabled or agent-based systems using commercial or open-source LLMs, including prompt engineering, tool calling, structured outputs, context management, and enterprise AI platforms.
Strong knowledge of OWASP Top 10, CWE, SAST, DAST, SCA, API security, secrets detection, software supply chain security, and vulnerability assessment.
Experience securing AI/LLM applications and AI-assisted development workflows, including mitigating prompt injection, data leakage, insecure tool use, excessive agency, and untrusted code execution.
Hands-on experience integrating security into CI/CD pipelines using GitHub, GitLab, Jenkins, Azure DevOps, Bitbucket, or similar platforms.
Knowledge of AWS, Azure, or GCP, container security, Kubernetes, and modern cloud deployment practices.
Experience integrating application security and vulnerability management platforms, including vulnerability correlation, deduplication, prioritization, risk scoring, and standardized formats such as SARIF.
Familiarity with model evaluation techniques, including labeled datasets, precision/recall metrics, regression testing, and comparative model analysis.
Experience with Git-based development, code reviews, automated testing, logging, metrics, distributed tracing, and production monitoring.
Familiarity with React, JavaScript, TypeScript, enterprise workflow platforms, and IT service management systems.
Experience in regulated or security-sensitive environments, with strong technical documentation, architecture design, and stakeholder communication skills.
Security certifications such as CSSLP, OSWE, GWEB, cloud security certifications, or equivalent are strongly preferred.

Responsibilities

Design, develop, test, and maintain AI-enabled application security solutions and automated vulnerability assessment capabilities.
Build and integrate security assessment pipelines that combine traditional security scanning tools with AI-assisted source code analysis and vulnerability identification.
Develop integrations with source code repositories, security tools, vulnerability management platforms, enterprise workflows, and AI/LLM platforms.
Lead the design and implementation of DevSecOps solutions, embedding security controls, automated testing, and secure coding practices into CI/CD pipelines.
Define technical requirements, system architecture, and reusable integration frameworks supporting AI models, security tools, and assessment engines.
Establish security guardrails for AI-generated code and AI-enabled applications, addressing prompt injection, insecure code, sensitive data exposure, and model misuse.
Lead security risk assessments, vulnerability prioritization, and remediation strategies aligned with business, regulatory, and technical requirements.
Develop security metrics and reporting to measure security posture, assessment coverage, and risk reduction.
Collaborate with application security, penetration testing, software engineering, AI engineering, and platform teams to deliver scalable security solutions.
Serve as a technical subject matter expert, providing guidance, troubleshooting complex issues, and supporting security incident response strategies.