Lead Application Security

S&P Global Market Intelligence; Hyderabad; On-site; INR 900,000 - 1,400,000; Full time

Job summary

S&P Global Market Intelligence is seeking an application security specialist in Hyderabad to perform security assessments, support platform onboarding, and assist development teams in secure coding practices.

Role involves integrating controls into GitHub, Azure DevOps, and Jenkins, plus addressing software supply chain security and cloud security across major clouds. The candidate will also develop automation to improve security operations and developer experience.

Qualifications

• Experience in application security assessments and secure coding practices.
• Familiarity with SAST, SCA, DAST and API security.
• Ability to support onboarding of security platforms and scanners.
• Experience integrating controls into developer pipelines and workflows.
• Knowledge of software supply chain security and artifact management.

Responsibilities

• Perform application security assessments including SAST, SCA, DAST, API security, secrets detection, and secure code reviews.
• Support onboarding and operation of application security platforms and scanning solutions.
• Assist development teams in remediation of vulnerabilities and secure coding practices.
• Help integrate security controls into GitHub, Azure DevOps, Jenkins, and developer workflows.
• Support software supply chain security initiatives including dependency governance and artifact management.
• Assist with CI/CD pipeline security reviews and implementation of security controls.
• Perform threat modeling and security reviews for new applications and services.
• Analyze security findings and support risk-based prioritization.
• Contribute to development of standards, procedures, and technical guidance.
• Participate in incident investigations involving application or software supply chain security issues.
• Support cloud application security reviews across Azure, AWS, and GCP environments.
• Develop scripts and automation to improve security operations and developer experience.

Skills

Application security

SAST

SCA

DAST

API security

Secrets detection

Secure code reviews

GitHub

Azure DevOps

Jenkins

CI/CD security

Threat modeling

Incident investigations

Cloud security

Tools

GitHub

Azure DevOps

Jenkins

CI/CD tooling

Job description

Job Summary

Grade Level (for internal use): 11

Responsibilities

• Perform application security assessments including SAST, SCA, DAST, API security, secrets detection, and secure code reviews.
• Support onboarding and operation of application security platforms and scanning solutions.
• Assist development teams in remediation of vulnerabilities and secure coding practices.
• Help integrate security controls into GitHub, Azure DevOps, Jenkins, and developer workflows.
• Support software supply chain security initiatives including dependency governance and artifact management.
• Assist with CI/CD pipeline security reviews and implementation of security controls.
• Perform threat modeling and security reviews for new applications and services.
• Analyze security findings and support risk-based prioritization.
• Contribute to development of standards, procedures, and technical guidance.
• Participate in incident investigations involving application or software supply chain security issues.
• Support cloud application security reviews across Azure, AWS, and GCP environments.
• Develop scripts and automation to improve security operations and developer experience.