Associate Software Development Engineer - Information Security

S&P Global Market Intelligence; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

S&P Global Market Intelligence seeks a Security Engineer in Hyderabad to guide secure development across server-side, UI, and cloud integrations. The role emphasizes threat modeling, secure design reviews, and secure code reviews with growing focus on AI agents and LLM pipelines.

Responsibilities include AI risk assessment, security automation using Python, and triaging vulnerabilities discovered during tests, ensuring sandboxing and data-sensitive segmentation.

Qualifications

• Bachelor's degree in Computer Science, Information Security, a related technical field, or equivalent practical experience.
• 1+ year of professional experience in Information Security, Application Security, or a highly security-focused software development role.

Responsibilities

• Provide actionable security guidance to engineering teams across server-side development, UI frameworks, and cloud integrations.
• Partner with senior engineers on threat modeling, secure design reviews, and secure code reviews with focus on AI agents, LLM pipelines, and cognitive workflows.
• Assist in AI risk assessment for vulnerabilities like prompt injection, data poisoning, and insecure output handling.

Skills

Python security scripting

AI/LLM awareness

AppSec basics

Network cryptography basics

Education

Bachelor's degree in CS/Info Sec or related field

Tools

None

Job description

Grade Level (for internal use): 08

Responsibilities

• Secure Development Guidance: Assist in providing actionable security guidance to engineering teams across server-side development, UI frameworks, and cloud integrations.
• Threat Modeling Reviews: Partner with senior engineers to perform threat modeling, secure design reviews, and secure code reviews-with a growing focus on auditing AI agents, LLM pipelines, and cognitive workflows.
• AI Risk Assessment: Assist in identifying vulnerabilities unique to AI systems (such as prompt injection, data poisoning, and insecure output handling) and help evaluate new AI technologies adopted by the business.
• Security Automation: Leverage Python and open-source security tools to build, maintain, and automate security testing within the CI/CD pipeline.
• Vulnerability Research: Help analyze, triage, and remediate vulnerabilities discovered during automated scans or manual testing, acting as a technical advisor for engineering teams.
• Repeatable Security Patterns: Implement and support repeatable application security blueprints, ensuring applications and AI agents are appropriately sandboxed and segmented based on data sensitivity.
• Continuous Learning: Keep pace with evolving security trends, zero-day vulnerabilities, and emerging frameworks for securing AI architectures (such as the OWASP Top 10 for LLMs).

Qualifications

Basic Qualifications

• Education: Bachelor's degree in Computer Science, Information Security, a related technical field, or equivalent practical experience.
• Experience: 1year or more of professional experience in Information Security, Application Security, or a highly security-focused software development role.

Technical Skills Core Competencies

• Scripting Programming: Proficiency in Python for security scripting, automation, or data handling (exposure to Java or JavaScript/Angular is a plus).
• AI/LLM Awareness: Foundational knowledge of AI concepts, LLM architectures, or AI agents, including an understanding of how to securely interact with APIs and handle data privacy in AI workflows.
• Application Security Basics: Familiarity with core AppSec concepts, web services, microservices/SOA architecture, and standard vulnerability frameworks (OWASP Top 10).
• Network Cryptography Fundamentals: Solid understanding of TCP/IP networking, transport layer security (TLS/DTLS), PKI, certificate management, and basic encryption concepts