Senior DevSecOps Lead — Artifact & Supply Chain Security

S&P Global, Inc.; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Health care coverage

Continuous learning

Retirement planning

Employee discounts

Job summary

S&P Global is seeking a DevSecOps Engineer focused on Artifact Management and Software Supply Chain Security in London. You will secure build artifacts and dependencies across CI/CD pipelines while aligning with AI security and governance requirements.

Join a team enabling secure, trusted software delivery in cloud and hybrid environments, with emphasis on code quality, compliance, and risk-based decision making.

Qualifications

• 3–6 years in DevSecOps, platform security, or software supply chain security.
• Hands-on with JFrog Artifactory deployment and enterprise architecture.
• Experience designing package curation and promotion models.
• Foundational understanding of AI/ML and Generative AI concepts.
• Knowledge of AI/ML security risks such as prompt injection and data leakage.
• Experience integrating AI or ML components into pipelines.

Responsibilities

• Design, deploy, and operate enterprise artifact repositories for cloud and hybrid environments.
• Define and enforce package curation, promotion, and trust models.
• Implement workflows for dependency and artifact approvals, risk-based decisions.
• Integrate artifact repos into CI/CD pipelines (GitHub, Jenkins, Azure DevOps).
• Embed security controls for AI workloads within pipelines and developer workflows.
• Monitor artifact controls, risk posture, and drive continuous improvement.
• Create secure-by-design AI application architectures and governance.

Skills

DevSecOps

Artifactory

CI/CD pipelines

Azure

Python

Terraform

AI security

GitHub

Education

Bachelor's degree in CS/IS

Security certification

Tools

JFrog Artifactory

GitHub

Jenkins

Azure DevOps

Terraform

Job description

S&P Global is seeking a DevSecOps Engineer focused on Artifact Management and Software Supply Chain Security in London. You will secure build artifacts and dependencies across CI/CD pipelines while aligning with AI security and governance requirements.

Join a team enabling secure, trusted software delivery in cloud and hybrid environments, with emphasis on code quality, compliance, and risk-based decision making.