Senior AI & DevSecOps Security Engineer

McKesson Corporation; Atlanta (GA); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson Corporation in the United States seeks a Senior Product Security Engineer, AI & DevSecOps to embed security throughout software development, with focus on AI-enabled products and cloud-native platforms.

You will partner with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver products faster and more securely.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent professional experience
• Typically requires 7 or more years of relevant experience in application security, product security, software development, security engineering, DevSecOps, or a related discipline
• Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python, or comparable languages
• Strong understanding of application attack vectors, secure coding practices, software vulnerabilities, and modern application architectures
• Experience conducting threat modeling, security architecture reviews, secure design reviews, and vulnerability remediation
• Experience implementing DevSecOps practices and integrating automated security controls into CI/CD pipelines
• Experience securing AI/ML platforms, generative AI solutions, large language model applications, or AI-assisted development workflows
• Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and application security testing tools

Responsibilities

• Partner with development teams to incorporate security requirements throughout application design, development, testing, deployment, and operations
• Conduct security architecture reviews, threat modeling, secure design reviews, and assessments of applications, APIs, cloud services, and AI-enabled systems
• Write and review code to identify vulnerabilities, attack vectors, and opportunities to strengthen secure development practices
• Develop reusable security patterns, shared services, and automated guardrails that help engineering teams deliver products securely and efficiently
• Assess and secure AI, machine learning, generative AI, and large language model solutions, including the secure use of AI-assisted development tools
• Integrate automated security testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning
• Design security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments
• Partner with engineering and cybersecurity teams to assess risk, remediate vulnerabilities, respond to security concerns, and promote a security-first engineering culture

Skills

TypeScript/Java/Ruby/Python

Application security

Threat modeling

DevSecOps

AI security

Education

Degree in Computer Science, Information Security, Engineering, or related field

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

McKesson Corporation in the United States seeks a Senior Product Security Engineer, AI & DevSecOps to embed security throughout software development, with focus on AI-enabled products and cloud-native platforms.

You will partner with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver products faster and more securely.