Senior AI & DevSecOps Security Engineer

McKesson; United States; Remote; USD 140,000 - 234,000; Full time

Job summary

CoverMyMeds, part of McKesson, seeks a Senior Product Security Engineer focused on AI and DevSecOps to embed security across the software development lifecycle and AI-enabled products. You will collaborate with engineering, platform, and product teams to translate security requirements into practical patterns and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application security, AI security, and secure automation, including CI/CD

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related field, or equivalent experience
• 7+ years in application security, product security, software development, security engineering, or DevSecOps
• Hands-on experience writing, reviewing, and deploying code in TypeScript, Java, Ruby, or Python
• Strong understanding of attack vectors, secure coding practices, and modern architectures
• Experience with threat modeling, security reviews, and vulnerability remediation
• Experience implementing DevSecOps practices and CI/CD security controls
• Experience securing AI/ML platforms, AI-enabled services, or AI-assisted development workflows
• Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and testing tools

Responsibilities

• Partner with development teams to embed security throughout the SDLC
• Conduct security architecture reviews, threat modeling and secure design assessments
• Write and review code to identify vulnerabilities and strengthen security
• Develop reusable security patterns and automated guardrails for secure delivery
• Assess and secure AI/ML and generative AI solutions and AI-assisted tools
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, SCA, secrets, container, IaC)
• Design security controls for cloud-native apps, containers, Kubernetes, and serverless deployments
• Collaborate with engineering and security teams to manage risk and promote secure culture

Skills

TypeScript

Java

Ruby

Python

DevSecOps

Threat modeling

Secure coding

Cloud platforms

Containers/Kubernetes

CI/CD integration

Security automation

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

CoverMyMeds, part of McKesson, seeks a Senior Product Security Engineer focused on AI and DevSecOps to embed security across the software development lifecycle and AI-enabled products. You will collaborate with engineering, platform, and product teams to translate security requirements into practical patterns and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application security, AI security, and secure automation, including CI/CD