AI Security Software Engineer

Elevance Health•Indianapolis, IN

2d•Hybrid

About The Position

The AI Security Software Engineer designs, develops, and implements AI-driven security solutions to assess enterprise applications, analyze source code, and identify vulnerabilities. The role combines software engineering, application security, DevSecOps, and large language model (LLM) technologies to strengthen security capabilities, automate assessments, and reduce enterprise risk. The position develops AI-enabled application security solutions and automated vulnerability assessment capabilities, integrates security tools and AI platforms into enterprise workflows, and embeds security controls and secure coding practices into CI/CD pipelines. It also establishes guardrails for AI-generated code and AI-enabled applications, leads security risk assessments and remediation strategies, and develops metrics to track security posture and risk reduction. The engineer collaborates across application security, penetration testing, software engineering, AI engineering, and platform teams; serves as a technical subject matter expert; troubleshoots complex issues; and supports security incident response strategies. The role is hybrid, requiring associates to work in-office one to two days per week, with alternate locations considered for candidates within commuting distance of an office. The position is not eligible for current or future visa sponsorship.

Requirements

Bachelor's degree in Information Technology or a related field, and at least 8 years of experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience across multiple technical and business disciplines is required. An equivalent combination of education and experience may be considered.
Strong Python development skills, including experience building REST APIs using FastAPI, Flask, Django, or similar frameworks.
Familiarity with asynchronous processing, concurrency, automated testing such as pytest, and SQL databases.
Experience developing AI-enabled or agent-based systems using commercial or open-source LLMs, prompt engineering, tool calling, structured outputs, context management, and enterprise AI platforms.
Strong knowledge of OWASP Top 10, CWE, SAST, DAST, SCA, API security, secrets detection, software supply chain security, and vulnerability assessment.
Experience securing AI/LLM applications and AI-assisted development workflows, including mitigating prompt injection, data leakage, insecure tool use, excessive agency, and untrusted code execution.
Hands-on experience integrating security into CI/CD pipelines using GitHub, GitLab, Jenkins, Azure DevOps, Bitbucket, or similar platforms.
Knowledge of AWS, Azure, or GCP, container security, Kubernetes, and modern cloud deployment practices.
Experience integrating application security and vulnerability management platforms, including vulnerability correlation, deduplication, prioritization, risk scoring, and standardized formats such as SARIF.
Familiarity with model evaluation techniques, including labeled datasets, precision/recall metrics, regression testing, and comparative model analysis.
Experience with Git-based development, code reviews, automated testing, logging, metrics, distributed tracing, and production monitoring.
Experience in regulated or security-sensitive environments, with strong technical documentation, architecture design, and stakeholder communication skills.

Nice To Haves

Familiarity with React, JavaScript, TypeScript, enterprise workflow platforms, and IT service management systems.
Security certifications such as CSSLP, OSWE, GWEB, cloud security certifications, or equivalent.

Responsibilities

Design, develop, test, and maintain AI-enabled application security solutions and automated vulnerability assessment capabilities.
Build and integrate security assessment pipelines combining traditional scanning tools with AI-assisted source code analysis and vulnerability identification.
Develop integrations with source code repositories, security tools, vulnerability management platforms, enterprise workflows, and AI/LLM platforms.
Lead the design and implementation of DevSecOps solutions that embed security controls, automated testing, and secure coding practices into CI/CD pipelines.
Define technical requirements, system architecture, and reusable integration frameworks supporting AI models, security tools, and assessment engines.
Establish security guardrails for AI-generated code and AI-enabled applications, addressing prompt injection, insecure code, sensitive data exposure, and model misuse.
Lead security risk assessments, vulnerability prioritization, and remediation strategies aligned with business, regulatory, and technical requirements.
Develop security metrics and reporting to measure security posture, assessment coverage, and risk reduction.
Collaborate with application security, penetration testing, software engineering, AI engineering, and platform teams to deliver scalable security solutions.
Serve as a technical subject matter expert, provide guidance, troubleshoot complex issues, and support security incident response strategies.