security_result.severity uses an enumerated list for the value. The value will have to be INFORMATIONAL, LOW, MEDIUM, HIGH, or CRITICAL.

Here is how I handle it in most of the parser I build

https://files.slack.com/files-pri/TRKMZ7TDE-F05QY7TARDM/image.png

Thank you @Daniel_Love