Application Security Architect

S&P Global Market Intelligence; Dadri, Gurugram District; In loco; INR 2.500.000 - 4.200.000; Tempo pieno

Descrizione del lavoro

S&P Global Market Intelligence is seeking an experienced Application Security leader to partner with engineering, product, and risk teams. The role focuses on integrating secure coding practices, threat modeling, and AI-enabled security tooling across the SDLC.

You will drive complex assessments (SAST, SCA, DAST), design architecture reviews, and mentor security teammates while aligning with enterprise governance and automation-first culture.

Competenze

• 6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing.
• Strong knowledge of application security testing methodologies including SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
• Experience integrating security controls into development platforms such as GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
• Practical experience using generative AI and AI-assisted development tools to build custom security tools, scripts, integrations, or automations.
• Ability to lead technical engagements, communicate complex security risks to senior stakeholders, and drive remediation across distributed engineering teams.

Mansioni

• Lead complex application security assessments across multiple testing methodologies including SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate security vulnerabilities
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices
• Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions
• Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations that improve security testing, triage, and remediation while meeting enterprise governance standards
• Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to enterprise standards, procedures, and audit-ready documentation

Conoscenze

Application Security

DevSecOps

Secure Software Engineering

Threat Modeling

CI/CD Security

Communication Skills

Leadership & Mentoring

Adaptability

Formazione

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field

Strumenti

GitHub

Azure DevOps

Jenkins

Cloud-native delivery environments

Descrizione del lavoro

Job Summary

The SGA Application Security team operates as a strategic security partner, combining Application Security, DevSecOps, Exposure Management, and AI Security capabilities to proactively reduce risk while enabling innovation. Our collaborative, fast-paced culture emphasizes automation-first approaches, developer partnership, and continuous learning in emerging technologies. Team members gain exposure to enterprise-wide security transformation initiatives, AI-powered security tools, and opportunities to solve complex challenges that impact global engineering teams.

Grade Level (for internal use): 12

Responsibilities

• Lead complex application security assessments across multiple testing methodologies including SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate security vulnerabilities
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices
• Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions
• Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations that improve security testing, triage, and remediation while meeting enterprise governance standards
• Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to enterprise standards, procedures, and audit-ready documentation

What We're Looking For

Basic Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience
• 6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing with hands‑on technical expertise
• Strong knowledge of application security testing methodologies including SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices
• Experience integrating security controls into development platforms such as GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments
• Practical experience using generative AI and AI-assisted development tools to build custom security tools, scripts, integrations, or automations
• Ability to lead technical engagements, communicate complex security risks to senior stakeholders, and drive remediation across distributed engineering teams
• Strong analytical and problem‑solving abilities with attention to detail
• Excellent communication and presentation skills for technical and non-technical audiences
• Leadership and mentoring capabilities with collaborative team approach
• Adaptability to work in fast-paced, evolving technology environments

Additional Preferred Qualifications

• Knowledge of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval‑augmented generation, and secure integration of AI with enterprise platforms
• Experience with cloud application security across multi-cloud environments such as AWS, Azure, and GCP with understanding of cloud‑native security controls
• Strong automation capabilities and experience improving security operations at enterprise scale using scripting languages such as Python, PowerShell, or similar
• Experience with software supply chain security initiatives including dependency governance, artifact management, provenance validation, and trusted package consumption practices

Location -

Gurugram,Noida,Uttarpradesh,Hyderabad