Senior Product Security Engineer: AI & DevSecOps

McKesson Corporation; Columbus (OH); On-site; USD 140,000 - 234,000; Full time

Job summary

McKesson Corporation seeks a hands-on Senior Product Security Engineer focused on AI & DevSecOps. Embed security across SDLC, with threat modeling, secure design, and automated guardrails for AI-enabled platforms. You will work with engineering and product teams to translate security requirements into practical controls and patterns.

The role combines software development with deep security expertise, including AI security, attack vectors, and remediation across cloud-native environments.

Qualifications

• Degree in Computer Science, Information Security, Engineering, or related technical field, or equivalent professional experience
• 7+ years in application security, product security, software development, security engineering, or DevSecOps
• Hands-on with TypeScript, Java, Ruby, Python or similar languages
• Strong knowledge of attack vectors, secure coding, vulnerabilities, and modern architectures
• Experience threat modeling, security architecture reviews, and vulnerability remediation
• Experience securing AI/ML platforms, generative AI, LLMs, or AI-assisted development workflows
• Experience with cloud platforms, containers, Kubernetes, IaC, security automation, and testing tools

Responsibilities

• Partner with development teams to embed security requirements across design, development, testing, deployment, and operations
• Conduct security architecture reviews, threat modeling, and secure design assessments of apps, APIs, and cloud services
• Write and review code to identify vulnerabilities and improve secure development practices
• Develop reusable security patterns, shared services, and automated guardrails for engineering teams
• Assess and secure AI/ML systems, including AI-assisted development tools
• Integrate automated security testing into CI/CD: SAST, DAST, SCA, secrets, container, and IaC scans
• Design security controls for cloud-native apps, containers, Kubernetes, serverless, and IaC deployments
• Partner with teams to assess risk, remediate vulnerabilities, and promote security-first culture

Skills

Application Security

AI Security

DevSecOps

Cloud Platforms

Secure Coding

Education

Bachelor's degree in CS/Eng

Equivalent experience

Tools

GitHub Actions

Azure DevOps

GitLab

Jenkins

Terraform

Job description

McKesson Corporation seeks a hands-on Senior Product Security Engineer focused on AI & DevSecOps. Embed security across SDLC, with threat modeling, secure design, and automated guardrails for AI-enabled platforms. You will work with engineering and product teams to translate security requirements into practical controls and patterns.

The role combines software development with deep security expertise, including AI security, attack vectors, and remediation across cloud-native environments.