Senior AI Security Engineer, DevSecOps & Cloud

McKesson; Irving (TX); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson is seeking a Senior Product Security Engineer focused on AI & DevSecOps to embed security across the software development lifecycle for AI-enabled products. You will collaborate with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application security, AI security, threat modeling, vulnerability

Qualifications

• Degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent professional experience
• Typically requires 7 or more years of relevant experience in application security, product security, software development, security engineering, DevSecOps, or a related discipline
• Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python, or comparable languages
• Strong understanding of application attack vectors, secure coding practices, software vulnerabilities, and modern application architectures
• Experience conducting threat modeling, security architecture reviews, secure design reviews, and vulnerability remediation
• Experience implementing DevSecOps practices and integrating automated security controls into CI/CD pipelines
• Experience securing AI/ML platforms, generative AI solutions, large language model applications, or AI-assisted development workflows
• Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and application security testing tools

Responsibilities

• Partner with development teams to incorporate security requirements throughout application design, development, testing, deployment, and operations
• Conduct security architecture reviews, threat modeling, secure design reviews, and assessments of applications, APIs, cloud services, and AI-enabled systems
• Write and review code to identify vulnerabilities, attack vectors, and opportunities to strengthen secure development practices
• Develop reusable security patterns, shared services, and automated guardrails that help engineering teams deliver products securely and efficiently
• Assess and secure AI, machine learning, generative AI, and large language model solutions, including the secure use of AI-assisted development tools
• Integrate automated security testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning
• Design security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments
• Partner with engineering and cybersecurity teams to assess risk, remediate vulnerabilities, respond to security concerns, and promote a security-first engineering culture

Skills

TypeScript

Java

Python

Ruby

Application security

DevSecOps

Threat modeling

Cloud security

Education

Degree in Computer Science, Information Security, Engineering, or related field

Tools

SAST

DAST

Software composition analysis

Secrets detection

Container scanning

Infrastructure scanning

Job description

McKesson is seeking a Senior Product Security Engineer focused on AI & DevSecOps to embed security across the software development lifecycle for AI-enabled products. You will collaborate with engineering, platform, architecture, and product teams to translate security requirements into practical guidance, reusable patterns, and automated controls.

The ideal candidate combines hands-on software development with deep knowledge of application security, AI security, threat modeling, vulnerability