Senior AI Security Engineer — DevSecOps & Cloud

McKesson Corporation; Olathe (KS); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson Corporation seeks a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle with a focus on AI-enabled products, cloud-native platforms, and DevSecOps practices.

You will partner with engineering, product, and architecture teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver secure products quickly.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related technical field
• Typically 7+ years of experience in application security, product security, or DevSecOps
• Hands-on experience writing, reviewing, and deploying code in TS/Java/Ruby/Python
• Strong knowledge of application attack vectors and secure coding practices
• Experience with threat modeling, security architecture reviews, and vulnerability remediation
• Experience with CI/CD integration of automated security controls and AI/ML security

Responsibilities

• Partner with development teams to embed security across design, development, testing, deployment, and ops
• Conduct security architecture reviews, threat modeling, and assessments of apps, APIs, cloud services, and AI systems
• Review and write code to identify vulnerabilities and strengthen secure development practices
• Develop reusable security patterns and automated guardrails for rapid secure delivery
• Assess and secure AI/ML and generative AI in development workflows
• Integrate SAST, DAST, SCA, secrets detection, container and IaC security into CI/CD pipelines
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments
• Collaborate with security teams to remediate vulnerabilities and promote secure engineering culture

Skills

TypeScript

Java

Ruby

Python

Education

Bachelor's degree in Computer Science / Information Security / Engineering

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Kubernetes

Job description

McKesson Corporation seeks a Senior Product Security Engineer, AI & DevSecOps, to embed security across the software development lifecycle with a focus on AI-enabled products, cloud-native platforms, and DevSecOps practices.

You will partner with engineering, product, and architecture teams to translate security requirements into practical guidance, reusable patterns, and automated controls that help teams deliver secure products quickly.