Senior AI Security Engineer - DevSecOps & Cloud Native

McKesson; Atlanta (GA); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson’s CoverMyMeds unit is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security throughout our software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices.

This is a hands-on technical role for a security-minded software developer who translates security requirements into practical guidance, reusable patterns, shared services, and automated controls that help teams deliver products faster and more securely.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent professional experience.
• 7+ years of relevant experience in application security, product security, software development, security engineering, DevSecOps, or a related discipline.
• Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python, or comparable languages.
• Strong understanding of application attack vectors, secure coding practices, software vulnerabilities, and modern application architectures.
• Experience conducting threat modeling, security architecture reviews, secure design reviews, and vulnerability remediation.
• Experience implementing DevSecOps practices and integrating automated security controls into CI/CD pipelines.
• Experience securing AI/ML platforms, generative AI solutions, large language model applications, or AI-assisted development workflows.
• Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and application security testing tools.

Responsibilities

• Partner with development teams to incorporate security requirements throughout application design, development, testing, deployment, and operations.
• Conduct security architecture reviews, threat modeling, secure design reviews, and assessments of applications, APIs, cloud services, and AI-enabled systems.
• Write and review code to identify vulnerabilities, attack vectors, and opportunities to strengthen secure development practices.
• Develop reusable security patterns, shared services, and automated guardrails that help engineering teams deliver products securely and efficiently.
• Assess and secure AI, machine learning, generative AI, and large language model solutions, including the secure use of AI-assisted development tools.
• Integrate automated security testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning.
• Design security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments.
• Partner with engineering and cybersecurity teams to assess risk, remediate vulnerabilities, respond to security concerns, and promote a security-first engineering culture.

Skills

TypeScript

Java

Ruby

Python

Threat modeling

DevSecOps

Cloud security

Education

Degree in Computer Science or Information Security

Tools

CI/CD pipelines

Job description

McKesson’s CoverMyMeds unit is seeking a Senior Product Security Engineer, AI & DevSecOps to embed security throughout our software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices.

This is a hands-on technical role for a security-minded software developer who translates security requirements into practical guidance, reusable patterns, shared services, and automated controls that help teams deliver products faster and more securely.