Senior AI & DevSecOps Security Engineer

RXinsider LTD.; Columbus, Northern (OH, KY); Hybrid; USD 140,000 - 234,000; Full time

Job summary

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, focusing on AI-enabled products and cloud-native platforms. You will partner with engineering, platform, architecture, and product teams to design secure solutions, automate controls, and strengthen the security posture of applications and AI systems.

This role combines hands-on security expertise with automation, in a fast-paced environment, to deliver secure,

Qualifications

• 7+ years of relevant experience in application security, product security, security engineering, or related cybersecurity.
• Experience conducting security architecture reviews, threat modeling, design reviews, and vulnerability remediation.
• Experience implementing DevSecOps and integrating security controls into CI/CD pipelines.
• Experience securing AI/ML platforms, generative AI, LLM apps, or data science workflows.
• Familiarity with cloud platforms (Azure/AWS/GCP) and cloud-native tech like containers and Kubernetes.
• Experience with infrastructure-as-code and CI/CD tools (Terraform, GitHub Actions, Azure DevOps, GitLab, Jenkins).

Responsibilities

• Conduct security architecture reviews, threat modeling, and security assessments for applications, APIs, cloud services, and AI-enabled systems.
• Define and implement security requirements, standards, design patterns, and guardrails across SDLC.
• Identify and mitigate security risks; partner with engineering to remediate vulnerabilities and improve secure coding.
• Assess and secure AI/ML and generative AI solutions, including model governance, access controls, data protection, and risk management.
• Design and implement security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments.
• Integrate security controls and automated testing into CI/CD, including SAST, DAST, SCA, secrets detection, container and IaC scanning.
• Develop security automation using scripting, policy-as-code, and compliance-as-code technologies.
• Support IAM, secrets management, cloud security monitoring, vulnerability management, and incident response.
• Contribute to compliance efforts, security metrics, risk reporting, and continuous improvement.
• Provide technical guidance on secure development practices and promote a security-first engineering culture.

Skills

Security architecture reviews

Threat modeling

DevSecOps

CI/CD security

AI/ML security

Cloud platforms (Azure/AWS/GCP)

Scripting (Python/PowerShell/Bash)

Security tooling (SAST/DAST/SCA)

Kubernetes

Policy-as-code

Education

Degree in Computer Science, Information Security, Engineering, or related technical field

Tools

Terraform

GitHub Actions

Azure DevOps

GitLab

Jenkins

Job description

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, focusing on AI-enabled products and cloud-native platforms. You will partner with engineering, platform, architecture, and product teams to design secure solutions, automate controls, and strengthen the security posture of applications and AI systems.

This role combines hands-on security expertise with automation, in a fast-paced environment, to deliver secure,