AI Security Software Engineer
Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.
Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.
PLEASE NOTE: This position is not eligible for current or future visa sponsorship.
The AI Security Software Engineer designs, develops, and implements AI-driven security solutions to assess enterprise applications, analyze source code, and identify vulnerabilities. This role combines software engineering, application security, DevSecOps, and large language model (LLM) technologies to strengthen security capabilities, automate assessments, and reduce enterprise risk.
How You Will Make an Impact
- Design, develop, test, and maintain AI-enabled application security solutions and automated vulnerability assessment capabilities.
- Build and integrate security assessment pipelines that combine traditional security scanning tools with AI-assisted source code analysis and vulnerability identification.
- Develop integrations with source code repositories, security tools, vulnerability management platforms, enterprise workflows, and AI/LLM platforms.
- Lead the design and implementation of DevSecOps solutions, embedding security controls, automated testing, and secure coding practices into CI/CD pipelines.
- Define technical requirements, system architecture, and reusable integration frameworks supporting AI models, security tools, and assessment engines.
- Establish security guardrails for AI-generated code and AI-enabled applications, addressing risks such as prompt injection, insecure code, sensitive data exposure, and model misuse.
- Lead security risk assessments, vulnerability prioritization, and remediation strategies aligned with business, regulatory, and technical requirements.
- Develop security metrics and reporting to measure security posture, assessment coverage, and risk reduction.
- Collaborate with application security, penetration testing, software engineering, AI engineering, and platform teams to deliver scalable security solutions.
- Serve as a technical subject matter expert, providing guidance, troubleshooting complex issues, and supporting security incident response strategies.
Minimum Requirements
Requires BS/BA in information Technology or related field of study and a minimum of 8 years experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience with multiple technical and business disciplines required; or any combination of education and experience, which would provide an equivalent background.
Preferred Skills, Experience, and Competencies
- Software Engineering: Strong Python development skills, including experience building REST APIs using FastAPI, Flask, Django, or similar frameworks. Familiarity with asynchronous processing, concurrency, automated testing (pytest), and SQL databases.
- AI/LLM Integration: Experience developing AI-enabled or agent-based systems using commercial or open-source LLMs, prompt engineering, tool calling, structured outputs, context management, and enterprise AI platforms.
- Application Security: Strong knowledge of OWASP Top 10, CWE, SAST, DAST, SCA, API security, secrets detection, software supply chain security, and vulnerability assessment.
- AI Security: Experience securing AI/LLM applications and AI-assisted development workflows, including mitigating prompt injection, data leakage, insecure tool use, excessive agency, and untrusted code execution.
- DevSecOps & CI/CD: Hands-on experience integrating security into CI/CD pipelines using GitHub, GitLab, Jenkins, Azure DevOps, Bitbucket, or similar platforms.
- Cloud & Container Security: Knowledge of AWS, Azure, or GCP, container security, Kubernetes, and modern cloud deployment practices.
- Security Tool Integration: Experience integrating application security and vulnerability management platforms, including vulnerability correlation, deduplication, prioritization, risk scoring, and standardized formats such as SARIF.
- AI Evaluation & Testing: Familiarity with model evaluation techniques, including labeled datasets, precision/recall metrics, regression testing, and comparative model analysis.
- Development & Observability: Experience with Git-based development, code reviews, automated testing, logging, metrics, distributed tracing, and production monitoring.
- Additional Technologies: Familiarity with React, JavaScript, TypeScript, enterprise workflow platforms, and IT service management systems.
- Enterprise Security & Communication: Experience in regulated or security-sensitive environments, with strong technical documentation, architecture design, and stakeholder communication skills.
- Certifications: Security certifications such as CSSLP, OSWE, GWEB, cloud security certifications, or equivalent are strongly preferred.
Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.
Who We Are
Elevance Health is a health company dedicated to improving lives and communities – and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve.
How We Work
At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business.
We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.
Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process.
The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws.
Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process should submit the Accessibility Accommodation Request Form (https://forms.cloud.microsoft/pages/responsepage.aspx?id=8giMvgesLESaRuvu61vU17EJaA0EP3FIissI8zmZ_NpUNUgyTFRUMkY5NE5JNDFWMkhaUzQxMkJLWS4u&route=shorturl) and a member of the team will be in contact.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.
Prospective employees required to be screened under Florida law should review the education and awareness resources at HB531 | Florida Agency for Health Care Administration (https://info.flclearinghouse.com/) .
