AI Security Engineer for Product & DevSecOps

McKesson; Columbus (OH); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle with a focus on AI-enabled products and cloud-native platforms.

This hands-on role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver safer software.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent professional experience
• Typically requires 7 or more years of relevant experience in application security, product security, software development, security engineering, DevSecOps, or a related discipline
• Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python, or comparable languages
• Strong understanding of application attack vectors, secure coding practices, software vulnerabilities, and modern application architectures
• Experience conducting threat modeling, security architecture reviews, secure design reviews, and vulnerability remediation
• Experience implementing DevSecOps practices and integrating automated security controls into CI/CD pipelines
• Experience securing AI/ML platforms, generative AI solutions, large language model applications, or AI-assisted development workflows
• Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and application security testing tools

Responsibilities

• Partner with development teams to incorporate security requirements throughout application design, development, testing, deployment, and operations
• Conduct security architecture reviews, threat modeling, secure design reviews, and assessments of applications, APIs, cloud services, and AI-enabled systems
• Write and review code to identify vulnerabilities, attack vectors, and opportunities to strengthen secure development practices
• Develop reusable security patterns, shared services, and automated guardrails that help engineering teams deliver products securely and efficiently
• Assess and secure AI, machine learning, generative AI, and large language model solutions, including the secure use of AI-assisted development tools
• Integrate automated security testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning
• Design security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments
• Partner with engineering and cybersecurity teams to assess risk, remediate vulnerabilities, respond to security concerns, and promote a security-first engineering culture

Skills

TypeScript

Java

Ruby

Python

Education

Degree in Computer Science or Information Security or Engineering

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle with a focus on AI-enabled products and cloud-native platforms.

This hands-on role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver safer software.