Principal InfoSec Engineer — AI-Driven DevSecOps Leader

Blue Shield of CA; Columbus (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Blue Shield of CA is seeking a senior Product Security Engineer to design, build, and operate security as code across applications, data, cloud, and infrastructure. You will enable secure-by-default outcomes through automation and developer-native platforms, with a focus on AI-enabled systems and scalable security engineering.

The role reports to the Senior Director of Product Security and emphasizes leading security in the software lifecycle, CI/CD integration, and secure infrastructure.

Qualifications

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Skills

DevSecOps

Security Engineering

CI/CD Security

Terraform

Python

Go

TypeScript

Kubernetes

IAM & Encryption

Policy as Code

AI for Security

Healthcare Regulations

Education

Bachelor's degree or equivalent

Job description

Blue Shield of CA is seeking a senior Product Security Engineer to design, build, and operate security as code across applications, data, cloud, and infrastructure. You will enable secure-by-default outcomes through automation and developer-native platforms, with a focus on AI-enabled systems and scalable security engineering.

The role reports to the Senior Director of Product Security and emphasizes leading security in the software lifecycle, CI/CD integration, and secure infrastructure.