Highmark Health is a blended health organization spanning health insurance, hospital systems, dental care, vision services, and technology solutions. With more than 35,000 employees, the company operates at the intersection of payer and provider - meaning the attack surface is broad and the data at stake is among the most sensitive in any industry: protected health information, claims infrastructure, clinical systems, and the pipelines that connect them all.
The threat model here is real and multifaceted. Healthcare remains one of the most targeted sectors for ransomware, data exfiltration, and supply-chain compromise. Highmark Health's integrated structure - coordinating care across insurance and hospital systems - creates interconnected environments where a single misconfiguration or compromised credential can propagate laterally across business units. Security teams working in this context deal with legacy clinical systems, cloud migration, third-party risk, and the regulatory pressure of HIPAA and HITECH on every decision.
The organization describes itself as collaborative and purpose-driven, with a culture that values breakthrough ideas and challenges the status quo. For security practitioners, that translates to an environment where the work directly impacts patient safety and operational continuity - not abstract compliance checkboxes, but the actual resilience of systems that millions of people depend on for care coordination, claims processing, and clinical access.
