Senior AI & DevSecOps Security Engineer

McKesson Corporation; Irving (TX); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security across the software lifecycle, focusing on AI-enabled products and cloud-native platforms. You will partner with engineering, platform, and product teams to translate security needs into practical patterns and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application and AI security, threat modeling, and secure design reviews.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related field.
• Typically 7+ years of relevant security experience.
• Hands-on coding with TS/Java/Ruby/Python or similar languages.
• Strong knowledge of app security, AI security, attack vectors, and remediation.
• Experience with threat modeling, security architecture reviews, and secure design reviews.
• Experience with DevSecOps and integrating automated security controls into CI/CD.
• Experience securing AI/ML platforms and AI-assisted development workflows.
• Experience with cloud, containers, Kubernetes, IaC, and security testing tools.

Responsibilities

• Partner with development teams to embed security throughout design, development, testing, deployment, and operations.
• Conduct threat modeling, architecture reviews, and security assessments of apps, APIs, cloud services, and AI systems.
• Write/review code to detect vulnerabilities and strengthen secure development practices.
• Develop reusable security patterns, shared services, and automated guardrails across teams.
• Assess and secure AI/ML and LLM-based solutions and AI-assisted tools.
• Integrate automated security testing into CI/CD (SAST, DAST, SCA, secrets, container, IaC).
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments.
• Collaborate with cybersecurity to remediate vulnerabilities and promote secure engineering culture.

Skills

7+ years app security

Software development

DevSecOps

AI security

Cloud & Kubernetes

Code in TS/Java/Ruby/Python

Education

CS/InfoSec/Engineering degree

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

SAST

DAST

SCA

Container scanning

Infrastructure scanning

Job description

McKesson is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security across the software lifecycle, focusing on AI-enabled products and cloud-native platforms. You will partner with engineering, platform, and product teams to translate security needs into practical patterns and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application and AI security, threat modeling, and secure design reviews.