Principal Product Security Engineer: Security as Code & AI

Blue Shield of CA; Baltimore (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

Blue Shield of CA is seeking a senior-level Product Security Engineer to design, build, and operate security-as-code across application, data, cloud, and infrastructure environments. You will secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

We value leaders who foster growth, learning, and high performance while focusing on secure-by-default outcomes and collaboration with engineering teams.

Qualifications

• Requires college degree or equivalent experience.
• Minimum 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Skills

DevSecOps

Security Engineering

Software Engineering

CI/CD pipelines

AI in security

Cloud security

Distributed systems

Kubernetes security

IAM & encryption

Education

College degree or equivalent experience

Bachelor's degree or higher in a relevant field

Tools

Terraform

OPA

Kyverno

Kubernetes

Python

Go

TypeScript

Job description

Blue Shield of CA is seeking a senior-level Product Security Engineer to design, build, and operate security-as-code across application, data, cloud, and infrastructure environments. You will secure AI-enabled systems and scale security engineering with automation and developer-native platforms.

We value leaders who foster growth, learning, and high performance while focusing on secure-by-default outcomes and collaboration with engineering teams.