Principal Information Security Engineer - AI/DevSecOps

Blue Shield of CA; Denver (CO); On-site; USD 150,000 - 210,000; Full time

Job summary

Blue Shield of CA is seeking a Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure environments, ensuring secure-by-default outcomes through automation and developer-native platforms.

The role emphasizes securing AI-enabled systems, scaling security with AI, and leading security through CI/CD integration in regulated healthcare settings.

Qualifications

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Skills

Security engineering

DevSecOps

CI/CD integration

Distributed systems

Education

Bachelor's degree or equivalent experience

Tools

Terraform

Python

Go

TypeScript

Kubernetes

OPA

Kyverno

Job description

Blue Shield of CA is seeking a Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure environments, ensuring secure-by-default outcomes through automation and developer-native platforms.

The role emphasizes securing AI-enabled systems, scaling security with AI, and leading security through CI/CD integration in regulated healthcare settings.