Lead Security Engineer - Artificial Intelligence

Overview

Why Wellmark
:
We are a mutual insurance company owned by our policy holders across Iowa and South Dakota, and we ve built our reputation on over 80 years  worth of trust. We are not motivated by profits. We are motivated by the well-being of our friends, family, and neighbors–our members. If you re passionate about joining an organization working hard to put its members first, to provide best-in-class service, and one that is committed to sustainability and innovation, consider applying today!

Why Wellmark Technology? Wellmark is building innovative, modern solutions using cutting edge technology. We are driving organizational transformation and business strategy by empowering our technology team to innovate new and elegant solutions to enhance the customer experience. Together, we are leaning into the future, owning the outcome, and driving organizational change to transform how we work.

We are seeking a Lead Security Engineer with deep experience securing enterprise systems, cloud platforms, and agent‑based AI development environments s role is hands‑on and execution‑focused, responsible for defining guardrails around AI workloads across the full lifecycle—development, deployment, training, and inference. The ideal candidate combines production grade AI engineering with advanced expertise in cloud security, Dev Sec Ops , identity, and governance, enabling organizations to adopt GenAI, Microsoft Agents, and AI‑assisted code generation platforms safely and s role aligns closely to modern Engineer expectations, with a specialization in AI platform security, and risk‑aware AI delivery.

• Secure corporate AI capabilities used in enterprise applications
• Establish Best Practices for model implementation, versioning, monitoring and governance for AI Systems on the Enterprise
• Design/Implement guardrails for AI code‑generation tools used in developer workflows
• Enable and implement safe AI‑assisted development across IDEs, CI/CD pipelines, and local developer environments
• Support model selection and integrations within the organization (Claude class, GPT‑class, and similar platforms)
• Engineer and secure Microsoft Agents, Copilot‑style workflows, and agent‑driven automation
• Prevent insecure code generation, prompt leakage, and unsafe agent behavior while preserving developer velocity

Preferred:

• Strong proficiency in Python for AI workflows, automation, and orchestration
• Experience with RAG pipelines, embeddings, APIs, and AI service integration
• Understanding of AI lifecycle risks
• Strong experience securing AI workloads on AWS & Azure
• Experience with Cloud Hardening Best Practices
• Strong Infrastructure-as-Code (IaC) for Cloud, preferably Terraform
• Strong background in application security, cloud security, and IAM
• Experience embedding security into CI/CD, IaC, and SDLC workflows
• Automation experience using Python, Power Shell, Bash, and APIs
• Strong RHEL Linux skills, especially at the command line level
• Strong understanding of AI/LLM‑specific threats such as prompt injection, data poisoning, model theft, adversarial attacks, and data leakage
• Experience implementing AI security controls such as guardrails, content filtering, input/output validation, RBAC for AI systems, secure prompt handling, and AI audit logging
• Understanding of secure AI architecture and AI governance frameworks
• Familiarity with: OWASP Top 10 for LLM Applications; NIST AI Risk Management Framework;
  Responsible AI and AI compliance practices; SIEM, threat detection, and vulnerability management. Previous experience with integrating AI with SIEM systems

Required:

• Bachelor s degree or direct and applicable work experience
• 7+ years of experience architecting server or network controls in Dev Ops, Dev Sec Ops , IAM, system virtualization, Windows and Linux security, cloud security, network and network security, Active Directory, Java, XML, JSON, Azure, AWS, MySQL, Federation, SSO
• Knowledge of compliance and regulatory program requirements, such as HIPAA, ISO 27000, NIST, FISMA, and SOC standards
• Experience architecting and designing security solutions at the enterprise level with high‑scale cloud systems across…