Senior AI & DevSecOps Security Engineer

McKesson; Alpharetta (GA); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson seeks a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle for AI-enabled products and cloud-native platforms. This hands-on role partners with engineering, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls.

The ideal candidate has deep application and AI security experience, threat modeling expertise, and a track record of integrating automated

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related field (or equivalent).
• 7+ years of experience in application security, product security, or related disciplines.
• Hands-on experience writing/reviewing code in TypeScript, Java, Ruby, Python, or similar languages.
• Strong understanding of application attack vectors and secure coding practices.
• Experience with threat modeling, security architecture reviews, and vulnerability remediation.
• Experience implementing DevSecOps and integrating automated security controls into CI/CD.
• Experience securing AI/ML platforms and AI-assisted development workflows.
• Experience with cloud, containers, Kubernetes, IaC, security automation, and testing tools.

Responsibilities

• Partner with development teams to integrate security throughout design, development, testing, deployment, and operations.
• Conduct threat modeling, security reviews, and assessments of apps, APIs, cloud services, and AI systems.
• Write and review code to identify vulnerabilities and strengthen secure development.
• Develop reusable security patterns, shared services, and automated guardrails for engineering teams.
• Assess and secure AI/ML and AI-assisted development workflows.
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, SCA, secrets, containers, IaC).
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments.
• Collaborate with cybersecurity teams to remediate vulnerabilities and promote security culture.

Skills

Application security

DevSecOps

Threat modeling

Cloud security

AI security

Secure coding

CI/CD security

Team collaboration

Education

Bachelor's degree in CS or related

Tools

TypeScript

Java

Python

Kubernetes

GitHub Actions

Azure DevOps

Terraform

SAST/DAST tools

Job description

McKesson seeks a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle for AI-enabled products and cloud-native platforms. This hands-on role partners with engineering, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls.

The ideal candidate has deep application and AI security experience, threat modeling expertise, and a track record of integrating automated