Senior Product Security Engineer — AI-Driven DevSecOps

Blue Shield of California; California; Presencial; USD 150 000 - 190 000; Tempo integral

Resumo da oferta

Stellarus, part of the Ascendiun Family, seeks a Product Security Engineer to lead security-into-code across the software lifecycle. You will design, build, and operate security controls, embedding them in CI/CD and IaC workflows to protect AI-enabled systems and data.

You will work on SBOMs, provenance, and automated evidence generation while aligning with healthcare regulatory needs. Expect collaboration with security, product, and engineering teams in a dynamic environment.

Qualificações

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud-native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy-as-code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Responsabilidades

• Design and operate security controls embedded in CI/CD pipelines using policy-as-code and automation-first approaches.
• Build and maintain developer-native security platforms covering SAST, SCA, API validation, and IaC security.
• Implement data protection controls to detect and prevent exposure of sensitive data including PHI, PII, and secrets.
• Develop secure application and API patterns including authentication, authorization, and encryption standards.
• Engineer reusable libraries for encryption, tokenization, and data redaction.
• Define and enforce cloud and infrastructure security using Infrastructure-as-Code and GitOps workflows.
• Build identity, access, encryption, and network guardrails using automated controls.
• Implement software supply chain security including SBOM generation, artifact signing, and provenance validation.
• Develop detection-as-code and automated response capabilities to reduce reliance on manual security operations.
• Design and enforce controls to secure AI systems and prevent misuse, data leakage, and model risk.
• Leverage AI to improve detection, analysis, and automation across security operations.
• Translate regulatory requirements into enforceable technical controls and automated evidence generation.
• Eliminate manual security processes in favor of scalable engineering-driven solutions.

Conhecimentos

DevSecOps

Security Engineering

CI/CD security

Terraform

Python/Go/TypeScript

Cloud security

Kubernetes

IAM & encryption

Policy-as-code (OPA Kyverno)

AI/ML in security

Healthcare regulatory experience

Formação académica

College degree or equivalent

Ferramentas

Terraform

OPA/Kyverno

Descrição da oferta de emprego

Stellarus, part of the Ascendiun Family, seeks a Product Security Engineer to lead security-into-code across the software lifecycle. You will design, build, and operate security controls, embedding them in CI/CD and IaC workflows to protect AI-enabled systems and data.

You will work on SBOMs, provenance, and automated evidence generation while aligning with healthcare regulatory needs. Expect collaboration with security, product, and engineering teams in a dynamic environment.