Senior Product Security Engineer (AI-Driven, Cloud)

Blue Shield of CA; Seattle (WA); On-site; USD 170,000 - 260,000; Full time

Job summary

Blue Shield of CA's Product Security team is hiring a Product Security Engineer to design, build, and operate security as code across applications, data, cloud, and infrastructure. You will automate security controls, secure AI-enabled systems, and scale security engineering with developer-native platforms.

You will report to the Senior Director, Product Security and help secure the software lifecycle with secure-by-default outcomes.

Qualifications

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Skills

CI/CD security

Python

Go

TypeScript

Kubernetes security

Terraform

Policy as code

Security engineering

Cloud security

IAM & encryption

Education

Bachelor's degree or equivalent

Tools

OPA

Kyverno

Job description

Blue Shield of CA's Product Security team is hiring a Product Security Engineer to design, build, and operate security as code across applications, data, cloud, and infrastructure. You will automate security controls, secure AI-enabled systems, and scale security engineering with developer-native platforms.

You will report to the Senior Director, Product Security and help secure the software lifecycle with secure-by-default outcomes.