Senior DevSecOps Leader: Artifact & Supply Chain Security

S&P Global, Inc.; City Of London; On-site; GBP 92,000 - 122,000; Full time

Benefits offered by this job

Health care coverage

Flexible downtime

Continuous learning

Retirement planning

Family-friendly perks

Job summary

S&P Global is seeking a DevSecOps Engineer focused on Artifact Management and Software Supply Chain Security in London. You will secure and govern enterprise artifact platforms, optimize CI/CD integration, and enforce trusted, immutable, and compliant artifact processes across cloud and hybrid environments.

Key responsibilities include designing artifact repositories, promoting secure dependency usage, and embedding AI security controls within pipelines.

Qualifications

• 3–6 years of experience in DevSecOps, platform security, or software supply chain security.
• Hands-on experience with JFrog Artifactory, deployment and enterprise architecture.
• Experience designing package curation and promotion models.
• Knowledge of AI/ML security risks such as prompt injection and data leakage.
• Experience integrating AI/ML components into applications or pipelines (preferred).
• Experience implementing waiver and approval workflows for dependencies and artifacts.
• Strong understanding of application security principles and dependency risk management.

Responsibilities

• Design, deploy, and operate enterprise artifact repository platforms for cloud and hybrid environments.
• Define and enforce package curation, promotion, and trust models.
• Implement and govern waiver workflows for artifact usage to support risk-based decisions.
• Integrate artifact repositories into CI/CD pipelines (GitHub, Jenkins, Azure DevOps).
• Embed security controls for AI/ML workloads, including AI security scanning in pipelines.
• Define secure-by-design AI application architectures and governance across the SDLC.

Skills

Artifactory

CI/CD security

Python scripting

Jenkins

Azure DevOps

Tools

GitHub

Jenkins

Azure DevOps

Terraform

Artifactory

Job description

S&P Global is seeking a DevSecOps Engineer focused on Artifact Management and Software Supply Chain Security in London. You will secure and govern enterprise artifact platforms, optimize CI/CD integration, and enforce trusted, immutable, and compliant artifact processes across cloud and hybrid environments.

Key responsibilities include designing artifact repositories, promoting secure dependency usage, and embedding AI security controls within pipelines.