Senior Product Security Engineer, AI & DevSecOps

Rx Savings Solutions; Atlanta (GA); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson seeks a Senior Product Security Engineer to drive security across design, development, and deployment of AI-enabled systems. You will partner with engineering and product teams to translate security requirements into actionable patterns, reusable services, and automated controls that accelerate secure delivery.

The role combines hands-on software development with deep application security expertise, focusing on secure coding and automated security testing in CI/CD pipelines.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related field.
• 7+ years of experience in application security, product security, or DevSecOps.
• Hands-on experience with TypeScript, Java, Python, or Ruby.
• Strong knowledge of attack vectors and secure coding practices.
• Experience with threat modeling and security reviews.
• Experience integrating security controls into CI/CD pipelines.

Responsibilities

• Partner with development teams to embed security in design, development, and deployment.
• Conduct threat modeling and security reviews across apps and APIs.
• Write and review secure code to remediate vulnerabilities.
• Develop reusable security patterns and automated guardrails.
• Secure AI/ML/LLM workflows and AI-assisted development tools.
• Integrate SAST/DAST and software composition analysis into CI/CD.

Skills

TypeScript

Java

Python

Security

DevSecOps

Cloud

Kubernetes

Threat Modeling

SAST/DAST

CI/CD

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

McKesson seeks a Senior Product Security Engineer to drive security across design, development, and deployment of AI-enabled systems. You will partner with engineering and product teams to translate security requirements into actionable patterns, reusable services, and automated controls that accelerate secure delivery.

The role combines hands-on software development with deep application security expertise, focusing on secure coding and automated security testing in CI/CD pipelines.