Associate Software Development Engineer - Information Security

S&P Global Market Intelligence; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

S&P Global Market Intelligence in Hyderabad is seeking a security-focused engineer to contribute to secure development across server-side, UI, and cloud integrations.

You will work with senior engineers on threat modeling, AI/LLM safety, and CI/CD automation in Python, helping safeguard AI agents and data pipelines.

Qualifications

• Bachelor's degree or equivalent in CS, information security, or a related field.
• 1+ year in information security or security-focused software development.

Responsibilities

• Provide security guidance to engineering across server-side, UI, and cloud.
• Conduct threat modeling, secure design reviews, and secure code reviews for AI and LLM work.
• Assist in AI risk assessment and vulnerability remediation.
• Develop security automation in CI/CD with Python.
• Research vulnerabilities from scans and guide engineering teams.
• Implement repeatable security patterns and sandboxing.

Skills

Python scripting

AI/LLM awareness

AppSec basics

TLS/PKI

Education

Bachelor's degree

Job description

About the Role:

Grade Level (for internal use): 08

Key Responsibilities

• Secure Development Guidance: Assist in providing actionable security guidance to engineering teams across server-side development, UI frameworks, and cloud integrations.


• Threat Modeling Reviews: Partner with senior engineers to perform threat modeling, secure design reviews, and secure code reviewswith a growing focus on auditing AI agents, LLM pipelines, and cognitive workflows.


• AI Risk Assessment: Assist in identifying vulnerabilities unique to AI systems (such as prompt injection, data poisoning, and insecure output handling) and help evaluate new AI technologies adopted by the business.


• Security Automation: Leverage Python and open-source security tools to build, maintain, and automate security testing within the CI/CD pipeline.


• Vulnerability Research: Help analyze, triage, and remediate vulnerabilities discovered during automated scans or manual testing, acting as a technical advisor for engineering teams.


• Repeatable Security Patterns: Implement and support repeatable application security blueprints, ensuring applications and AI agents are appropriately sandboxed and segmented based on data sensitivity.


• Continuous Learning: Keep pace with evolving security trends, zero-day vulnerabilities, and emerging frameworks for securing AI architectures (such as the OWASP Top 10 for LLMs).

Basic Qualifications

• Education: Bachelors degree in Computer Science, Information Security, a related technical field, or equivalent practical experience.


• Experience: 1 year or more of professional experience in Information Security, Application Security, or a highly security-focused software development role.

Technical Skills Core Competencies

• Scripting Programming: Proficiency in Python for security scripting, automation, or data handling (exposure to Java or JavaScript/Angular is a plus).


• AI/LLM Awareness: Foundational knowledge of AI concepts, LLM architectures, or AI agents, including an understanding of how to securely interact with APIs and handle data privacy in AI workflows.


• Application Security Basics: Familiarity with core AppSec concepts, web services, microservices/SOA architecture, and standard vulnerability frameworks (OWASP Top 10).


• Network Cryptography Fundamentals: Solid understanding of TCP/IP networking, transport layer security (TLS/DTLS), PKI, certificate management, and basic encryption concepts