Senior Product Security Engineer, AI – DevSecOps

🕒 September 23

🌪️ Kansas, Ohio, +1 more states – Remote

🌪️ Kansas – Remote 🏈 Ohio – Remote 🤠 Texas – Remote

💵 $140.3k - $233.8k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

McKesson

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1833

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

McKesson is a diversified healthcare leader specializing in pharmaceutical distribution, medical supplies, and healthcare services. Their solutions facilitate patients' access to life-changing therapies, support efficient operations for pharmacies, health systems, and clinics, and address critical issues such as drug shortages through a resilient supply chain. McKesson provides comprehensive services such as pharmacy management software, consulting, and technology solutions for specialty practices, focusing on improving health outcomes and advancing the pharmaceutical industry. They work closely with biopharma companies to enhance medication access, adherence, and commercialization while supporting oncology and biopharma practices through data-driven insights and real-world evidence.

📋 Description

• Embed security throughout the software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices • Partner with development teams across application design, development, testing, deployment, and operations • Conduct security architecture reviews, threat modeling, secure design reviews, and assessments of applications, APIs, cloud services, and AI-enabled systems • Write and review code to identify vulnerabilities, attack vectors, and opportunities to strengthen secure development practices • Develop reusable security patterns, shared services, and automated guardrails • Assess and secure AI, machine learning, generative AI, and large language model solutions, including AI-assisted development tools • Integrate automated security testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning • Design security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments • Partner with engineering and cybersecurity teams to assess risk, remediate vulnerabilities, respond to security concerns, and promote a security-first engineering culture

🎯 Requirements

• Degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent professional experience • Typically requires 7 or more years of relevant experience in application security, product security, software development, security engineering, DevSecOps, or a related discipline • Hands-on experience writing, reviewing, and deploying application code using TypeScript, Java, Ruby, Python, or comparable languages • Strong understanding of application attack vectors, secure coding practices, software vulnerabilities, and modern application architectures • Experience conducting threat modeling, security architecture reviews, secure design reviews, and vulnerability remediation • Experience implementing DevSecOps practices and integrating automated security controls into CI/CD pipelines • Experience securing AI/ML platforms, generative AI solutions, large language model applications, or AI-assisted development workflows • Experience with cloud platforms, containers, Kubernetes, infrastructure-as-code, security automation, and application security testing tools • Knowledge of AI security frameworks and controls, including the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework • Experience creating reusable security services, secure development patterns, engineering guardrails, or policy-as-code solutions • Experience with CI/CD and infrastructure technologies such as GitHub Actions, Azure DevOps, GitLab, Jenkins, or Terraform • Experience supporting frameworks such as SOC 2, HIPAA, SOX, NIST CSF, or ISO 27001 • Ability to translate complex security requirements and technical risks into practical guidance for development teams • Applicants must be currently authorized to work in the United States on a fulltime basis without the need for employer support or sponsorship now or in the future

🏖️ Benefits

• Competitive compensation package • Annual bonus or long-term incentive opportunities may be offered • Equal employment opportunities • Reasonable accommodation for job search or application