Senior AI & DevSecOps Security Engineer

McKesson Corporation; United States; On-site; USD 140,000 - 234,000; Full time

Job summary

CoverMyMeds is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security throughout the software development lifecycle with a focus on AI-enabled products and cloud-native platforms.

This hands-on security engineering role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls to help teams deliver securely and efficiently.

Qualifications

• 7+ years of relevant experience in application security, product security, or security engineering.
• Hands-on coding in TypeScript, Java, Ruby, Python or comparable languages.
• Experience with threat modeling, security reviews, and vulnerability remediation.
• Experience integrating automated security into CI/CD pipelines.
• Experience with securing AI/ML platforms and AI-assisted development workflows.
• Experience with cloud, containers, Kubernetes, and IaC.

Responsibilities

• Partner with development teams to embed security across design, development, testing, deployment, and operations.
• Perform security architecture reviews, threat modeling, and secure design assessments of apps, APIs, cloud services, and AI systems.
• Write and review code to identify vulnerabilities and strengthen secure development practices.
• Develop reusable security patterns and automated guardrails for fast, secure product delivery.
• Assess and secure AI/ML and large language model solutions, including AI-assisted tool usage.
• Integrate automated security testing into CI/CD, including SAST, DAST, SCA, secrets, and container scans.
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments.
• Collaborate with teams to assess risk, remediate vulnerabilities, and promote a security-first culture.

Skills

Security engineering

Threat modeling

Secure design reviews

DevSecOps

AI/ML security

Cloud platforms

Kubernetes

Infrastructure as code

TypeScript

Java

Ruby

Python

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

CoverMyMeds is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security throughout the software development lifecycle with a focus on AI-enabled products and cloud-native platforms.

This hands-on security engineering role partners with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls to help teams deliver securely and efficiently.