Security Engineer

Blue Cross and Blue Shield of Minnesota is hiring a Security Engineer to strengthen Application Security (AppSec) and AI Security across the software and AI development lifecycles. In this hybrid role in Eagan, MN, you will help identify, assess, and reduce security risk by evaluating code, dependencies, infrastructure-as-code, AI workloads, and protective controls.

What You’ll Do

• Identify, assess, and prioritize routine to moderately complex AppSec and AI Security risks, vulnerabilities, and control gaps by conducting application, code, dependency, infrastructure-as-code, and AI workload scanning; document findings and escalate high-impact or highly complex issues as appropriate.
• Implement, maintain, and improve security controls and automation in GitLab development and CI/CD workflows to surface issues earlier, support secure releases, and streamline remediation.
• Review Terraform configurations and related cloud deployment patterns to uncover security weaknesses, policy violations, and control gaps, validating remediation using established standards and processes.
• Support configuration, monitoring, and improvement of WAF protections for internet-facing applications and APIs, including services used to enable AI capabilities.
• Partner with engineering teams working in Java, Python, and Go to interpret scanning results, recommend practical remediation, promote secure coding practices, and reduce recurring vulnerabilities.
• Perform defined security assessments for applications, APIs, AI solutions, models, agents, and supporting data flows to evaluate control effectiveness, identify improvement opportunities, document results, and validate remediation efforts.
• Collaborate with business, development, data, and technology stakeholders to document AppSec and AI Security requirements and implement solutions for defined security needs and identified risks, with senior guidance for complex or cross-enterprise decisions.
• Provide practical guidance on established security controls, risk management practices, and security-related standards, routing novel, high-risk, or complex interpretations to senior security resources.
• Develop and maintain security procedures, work instructions, standards, and technical documentation, incorporating review and approval as required.
• Participate in risk assessments, audits, and continuous improvement initiatives by providing evidence, completing assigned actions, and recommending improvements within scope.
• Perform additional responsibilities consistent with the scope and level of the role, as assigned.

Required Qualifications

• 3+ years of related IT Security professional experience.
• Bachelor’s degree; if you do not have a degree, an additional two years of relevant experience beyond the qualifications listed above may be accepted.

Tools and Technologies

• GitLab, CI/CD
• Terraform
• WAF
• Java, Python, Go
• AI

Compensation and Location

• Location: Eagan, MN (Hybrid)
• Salary: USD 79,100 - 130,500 per year

Hybrid Work Structure

The hybrid approach is designed to balance flexibility with meaningful in-person connection and collaboration. Team members come together in the office two days each week, with most teams designating at least one anchor day to ensure team interaction. The remainder of the week is remote.

Benefits

• Medical, dental, and vision insurance
• Life insurance
• 401k
• Paid Time Off (PTO)
• Volunteer Paid Time Off (VPTO)

Preferred Certifications

• Amazon AWS Cloud Practitioner - Amazon