AI-Driven Product Security Engineer — DevSecOps Innovator

Rx Savings Solutions; Irving (TX); On-site; USD 140,000 - 234,000; Full time

Job summary

CoverMyMeds seeks a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices.

You will collaborate with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver secure products efficiently.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or equivalent professional experience.
• 7+ years of relevant experience in application security, product security, security engineering, or DevSecOps.
• Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python.
• Strong understanding of application attack vectors, secure coding practices, vulnerabilities, and modern architectures.
• Experience conducting threat modeling, security architecture reviews, secure design reviews, and remediation.
• Experience implementing DevSecOps practices and automated security controls into CI/CD pipelines.
• Experience securing AI/ML platforms or AI-assisted development workflows.
• Experience with cloud platforms, containers, Kubernetes, IaC, security automation, and testing tools.

Responsibilities

• Partner with development teams to incorporate security requirements throughout design, development, testing, deployment, and operations.
• Conduct security architecture reviews, threat modeling, and assessments of applications, APIs, cloud services, and AI-enabled systems.
• Write and review code to identify vulnerabilities and strengthen secure development practices.
• Develop reusable security patterns, shared services, and automated guardrails for secure delivery.
• Assess and secure AI, ML, generative AI, and LLM solutions, including AI-assisted development tools.
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, SCA, secrets detection, container and IaC scanning).
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments.
• Collaborate with engineering and cybersecurity teams to remediate vulnerabilities and promote a security-first culture.

Skills

Security engineering

DevSecOps

TypeScript/Java/Ruby/Python

Threat modeling

Cloud security

CI/CD security

AI security

Security automation

Kubernetes

Education

Computer Science degree

Information Security degree

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Kubernetes

SAST/DAST tools

Job description

CoverMyMeds seeks a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices.

You will collaborate with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver secure products efficiently.