[Remote] Sr Product Security Engineer, AI & DevSecOps

September 26, 2026

Other Jobs To Apply

No other job posts for this day.

Note: The job is a remote job and is open to candidates in USA. McKesson is an impact-driven healthcare company focused on making quality care more accessible and affordable. The Senior Product Security Engineer will embed security across the software development lifecycle, focusing on AI-enabled products, cloud-native platforms, and DevSecOps practices. The role partners with engineering, platform, architecture, and product teams to design secure solutions, automate security controls, and strengthen application and AI system security.

Responsibilities

Conduct security architecture reviews, threat modeling, and security assessments for applications, APIs, cloud services, and AI-enabled systems
Define and implement security requirements, standards, reusable design patterns, and security guardrails across the software development lifecycle
Identify, assess, and help mitigate security risks while partnering with engineering teams to remediate vulnerabilities and strengthen secure coding practices
Assess and secure AI, machine learning, and generative AI solutions, including controls for model governance, secure access, data protection, and AI risk management
Design and implement security controls for cloud-native applications, containers, Kubernetes, serverless platforms, and infrastructure-as-code deployments
Integrate security controls and automated testing into CI/CD pipelines, including SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure scanning
Develop security automation using scripting, infrastructure-as-code, policy-as-code, and compliance-as-code technologies
Support identity and access management, secrets management, cloud security monitoring, vulnerability management, and incident response activities
Contribute to compliance initiatives, security metrics, risk reporting, and continuous improvement efforts
Provide technical guidance on secure development practices and champion a security-first engineering culture

Skills

Degree in Computer Science, Information Security, Engineering, or related technical field, or equivalent experience
Typically requires 7+ years of relevant experience in application security, product security, security engineering, or a related cybersecurity discipline
Experience conducting security architecture reviews, threat modeling, secure design reviews, and vulnerability remediation
Experience implementing DevSecOps practices and integrating security controls into CI/CD pipelines
Experience securing AI/ML platforms, generative AI solutions, large language model applications, or data science workflows
Experience with secure software development lifecycle practices, vulnerability management, and Agile development methodologies
Experience with cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform and cloud-native technologies including containers and Kubernetes
Experience with infrastructure-as-code and CI/CD technologies such as Terraform, GitHub Actions, Azure DevOps, GitLab, Jenkins, or similar tools
Proficiency in scripting and automation using Python, PowerShell, Bash, or comparable languages
Experience with security tooling including SAST, DAST, software composition analysis (SCA), container security, secrets detection, and infrastructure scanning
Knowledge of AI security frameworks and controls, including the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework
Experience implementing policy-as-code, compliance-as-code, or security automation solutions
Experience supporting regulatory and control frameworks such as SOC 2, HIPAA, SOX, NIST Cybersecurity Framework (CSF), or ISO 27001
Experience with Security Orchestration, Automation, and Response (SOAR) platforms
Ability to communicate complex technical risks and tradeoffs to both technical and non-technical stakeholders
Ability to influence across teams, contribute to technical standards, and promote secure engineering practices

Benefits

Fully Remote
An annual bonus may be offered.
Long-term incentive opportunities may be offered.

Company Overview

Rx Savings Solutions provides healthcare consumerism software to help employers and employees save money on prescription medications. It was founded in 2008, and is headquartered in Overland Park, Kansas, USA, with a workforce of 201-500 employees. Its website is https://www.rxsavingssolutions.com.

Company H1B Sponsorship

Rx Savings Solutions has a track record of offering H1B sponsorships, with 24 in 2023, 33 in 2022, 24 in 2021, 30 in 2020. Please note that this does not guarantee sponsorship for this specific role.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...