Information Security Engineer, Principal

Your Role

The Information Security, Risk and Operations team is responsible for providing cyber security services and service management to Blue Shield of California that enable secure and stable product development and operations. The Principal Artificial Intelligence Engineer will report to the Director of Information Security. In this role you will lead the design and implementation of solutions that power the next generation of security and IT service management capabilities in a digital healthcare environment. This high-impact role is critical to driving innovation across our platforms, proactively defending against emerging threats, and ensuring the safety, integrity, and stability of healthcare data and systems.

Your Work

In this role, you will:

• Strategic Automation Leadership: Define the long-term automation strategy for Information Security with specific focus on healthcare data protection mandates.
• Data Protection Automation: Leveraging Cloud and AI technologies, design and implement solutions supporting Data Loss Prevention, Dynamic Data Classification & Labeling, Data Discovery and Data Security Posture Management. 
• Governance, Trust & Explainability: Ensure solutions are interpretable, secure, bias-tested, and compliant with healthcare privacy regulations (e.g., HIPAA, HITRUST, NIST 800-53). Contribute to AI model governance standards.

• Mentorship & Collaboration: Mentor mid- and senior-level engineers, foster cross-functional partnerships with DevSecOps, Privacy, Data Engineering, and AI teams, and evangelize automation’s role in proactive risk management and operational excellence.

   

Your Knowledge and Experience

• Requires a Bachelor’s degree in Computer Science, Data Science, AI/ML, related technical field, or equivalent experience 
• Requires at least 10 years experience of relevant experience, software or security engineering (cybersecurity or risk context preferred.
• Proven experience leading automation initiatives in a production environment.
• Proficiency in Python, Go, Java or other modern coding languages
• Hands-on experience designing, implementing, delivering and supporting cloud based solutions.
• Deep knowledge of security domains such as threat detection, attack surface management, identity protection, and compliance analytics.
• Understanding of key InfoSec concepts: threat modeling, detection engineering, incident response, vulnerability management.
• Knowledge of healthcare compliance and data protection requirements (HIPAA, NIST, HITRUST, etc.) is strongly preferred.
• Strategic thinker who can translate complex concepts into actionable plans
• Excellent communication skills to present and translate technical capabilities to business leaders, recognize strategic opportunities, and make data-driven decisions

#LI-FB1