AI Security Software Engineer
Elevance Health3 days ago
Cincinnati, OH, USA +7 moreSenior
Responsibilities
- Design, develop, test, and maintain AI-enabled application security solutions and automated vulnerability assessment capabilities.
- Build security assessment pipelines combining traditional scanning tools with AI-assisted source code analysis and vulnerability identification.
- Integrate source code repositories, security tools, vulnerability management platforms, enterprise workflows, and AI/LLM platforms.
- Lead DevSecOps implementations that embed security controls, automated testing, and secure coding practices into CI/CD pipelines.
- Define technical requirements, system architecture, reusable integration frameworks, and AI security guardrails.
- Conduct security risk assessments, vulnerability prioritization, remediation planning, and security metrics reporting.
- Collaborate with application security, penetration testing, software engineering, AI engineering, and platform teams.
- Provide technical subject-matter expertise, troubleshoot complex issues, and support security incident response strategies.
Requirements
- A BS/BA in Information Technology or a related field, plus at least eight years of relevant experience, or an equivalent combination of education and experience.
- Strong Python development skills and experience building APIs with FastAPI, Flask, Django, or similar frameworks.
- Experience developing AI-enabled or agent-based systems using commercial or open-source LLMs, prompt engineering, tool calling, structured outputs, and context management.
- Strong application security knowledge, including OWASP Top 10, CWE, SAST, DAST, SCA, API security, secrets detection, software supply chain security, and vulnerability assessment.
- Experience securing AI/LLM applications and AI-assisted development workflows against prompt injection, data leakage, insecure tool use, excessive agency, and untrusted code execution.
- Hands-on experience integrating security into CI/CD pipelines and working with cloud, container, and Kubernetes security.
- Experience integrating vulnerability management platforms and using vulnerability correlation, deduplication, prioritization, risk scoring, and SARIF.
- Familiarity with AI evaluation, labeled datasets, precision/recall metrics, regression testing, comparative model analysis, observability, and production monitoring.
- Familiarity with React, JavaScript, TypeScript, enterprise workflow platforms, and IT service management systems.
- Experience in regulated or security-sensitive environments, with strong technical documentation, architecture design, and stakeholder communication skills.
- Security certifications such as CSSLP, OSWE, GWEB, or cloud security certifications are strongly preferred.
Benefits
- Hybrid work requiring associates to be in-office one to two days per week, with alternate locations considered within commuting distance.
- Merit increases, paid holidays, paid time off, incentive bonus programs, medical, dental, vision, short- and long-term disability benefits, and a 401(k) match.
- Stock purchase plan, life insurance, wellness programs, and financial education resources.
Tech Stack
AWSAzureDjangoFastAPIFlaskGoogle Cloud PlatformJavaScriptJenkinsKubernetespytestPythonReactSQLTypeScript
Categories
About Elevance Health
Fueled by our bold purpose to improve the health of humanity, we are transforming from a traditional health benefits organization into a lifetime trusted health partner. Our nearly 100,000 associates serve more than 118 million people, at every stage of health. We address a full range of needs with an integrated whole health approach, powered by industry-leading capabilities and a digital platform for health. We believe that improving health for everyone is possible. It begins by redefining health, reimagining the health system, and strengthening our communities.