Principal Security Engineer – AI-Driven DevSecOps Leader

Blue Shield of CA; Las Vegas (NV); On-site; USD 140,000 - 170,000; Full time

Job summary

Blue Shield of CA is seeking a Product Security Engineer to design, build, and operate security as code across the software lifecycle. You will secure AI-enabled systems, automate security in CI/CD, and integrate cloud and data security into engineering practices.

The role requires a strong background in DevSecOps and hands-on experience with Terraform and Kubernetes, ensuring secure-by-default outcomes and scalable security tooling.

Qualifications

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Skills

Python/Go/TypeScript

CI/CD security

IAM/encryption

AI/ML in security

Cloud security

Distributed systems

Security as code

Policy-as-code (OPA/Kyverno)

Kubernetes/cloud-native

Security tooling

Education

College degree or equivalent experience

Tools

Terraform

Kubernetes

Job description

Blue Shield of CA is seeking a Product Security Engineer to design, build, and operate security as code across the software lifecycle. You will secure AI-enabled systems, automate security in CI/CD, and integrate cloud and data security into engineering practices.

The role requires a strong background in DevSecOps and hands-on experience with Terraform and Kubernetes, ensuring secure-by-default outcomes and scalable security tooling.