Principal Product Security Engineer

Blue Shield of California; California; Sur place; USD 149 000 - 223 000; Plein temps

Résumé du poste

Stellarus is seeking a senior Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure. You will help secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

You will drive CI/CD security, SBOMs, IAM, encryption, and AI-driven detection and response, translating regulatory requirements into automated controls and evidence generation while reducing manual security processes.

Qualifications

• Requires college degree or equivalent experience
• Requires a minimum of at least 10 years of relevant experience
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred
• Strong experience building security capabilities into CI/CD pipelines
• Hands-on experience with Infrastructure-as-Code tools such as Terraform
• Proficiency in Python, Go, or TypeScript
• Deep understanding of application security, cloud security, and distributed systems
• Experience securing Kubernetes or cloud-native environments
• Strong understanding of IAM, encryption, and network security principles
• Experience with policy-as-code tools such as OPA or Kyverno
• Experience with AI/ML systems or applying AI to security problems preferred
• Experience in regulated environments such as healthcare preferred

Responsabilités

• Design and operate security controls embedded in CI/CD pipelines using policy-as-code and automation-first approaches
• Build and maintain developer-native security platforms covering SAST, SCA, API validation, and IaC security
• Implement data protection controls to detect and prevent exposure of sensitive data including PHI, PII, and secrets
• Develop secure application and API patterns including authentication, authorization, and encryption standards
• Engineer reusable libraries for encryption, tokenization, and data redaction
• Define and enforce cloud and infrastructure security using Infrastructure-as-Code and GitOps workflows
• Build identity, access, encryption, and network guardrails using automated controls
• Implement software supply chain security including SBOM generation, artifact signing, and provenance validation
• Develop detection-as-code and automated response capabilities to reduce reliance on manual security operations
• Design and enforce controls to secure AI systems and prevent misuse, data leakage, and model risk
• Leverage AI to improve detection, analysis, and automation across security operations
• Translate regulatory requirements into enforceable technical controls and automated evidence generation
• Eliminate manual security processes in favor of scalable engineering-driven solutions

Description du poste

Stellarus is seeking a senior Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure. You will help secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

You will drive CI/CD security, SBOMs, IAM, encryption, and AI-driven detection and response, translating regulatory requirements into automated controls and evidence generation while reducing manual security processes.