Senior AI & DevSecOps Security Engineer

McKesson; Overland Park (KS); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson seeks a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, with a focus on AI-enabled products, cloud-native platforms, and DevSecOps practices.

This hands-on role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver products faster and more securely.

Qualifications

• 7+ years in application security, product security, software development or DevSecOps.
• Hands-on coding with TypeScript, Java, Ruby, or Python.
• Strong knowledge of attack vectors, secure coding, and modern app architectures.
• Experience with threat modeling, security architecture reviews, and remediation.
• Experience integrating automated security controls into CI/CD pipelines.

Responsibilities

• Partner with development teams to embed security requirements throughout design, development, testing, deployment, and operations.
• Conduct threat modeling, security reviews, and assessments of apps, APIs, cloud services, and AI-enabled systems.
• Write and review code to identify vulnerabilities and strengthen secure development practices.
• Develop reusable security patterns, shared services, and automated guardrails for engineering teams.
• Assess and secure AI/ML/LLM solutions and AI-assisted development tools.
• Integrate SAST, DAST, SCA, secrets detection, container and IaC scanning into CI/CD.
• Design security controls for cloud-native apps, containers, Kubernetes, and serverless deployments.

Skills

TypeScript

Java

Python

Ruby

DevSecOps

Application Security

Threat Modeling

Security Architecture

CI/CD

Education

Bachelor's degree in Computer Science, Information Security, Engineering

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Cloud platforms

Job description

McKesson seeks a Senior Product Security Engineer, AI & DevSecOps to embed security across the software development lifecycle, with a focus on AI-enabled products, cloud-native platforms, and DevSecOps practices.

This hands-on role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver products faster and more securely.