Senior Application Security Engineer

S&P Global Market Intelligence; Hyderabad; Híbrido; INR 1 800 000 - 3 000 000; Tempo integral

Resumo da oferta

S&P Global Market Intelligence in Hyderabad, India, seeks an Application Security Engineer to strengthen secure coding and security reviews across applications and services. You will partner with development teams to remediate vulnerabilities and embed security controls into pipelines, focusing on SAST, DAST, SCA, and software supply chain security.

You will develop automation to improve security operations, support cloud security reviews (Azure, AWS, GCP), and contribute to governance and

Responsabilidades

• Perform application security assessments including SAST, SCA, DAST, API security, secrets detection, and secure code reviews.
• Support onboarding and operation of application security platforms and scanning solutions.
• Assist development teams in remediation of vulnerabilities and secure coding practices.
• Help integrate security controls into GitHub, Azure DevOps, Jenkins, and developer workflows.
• Support software supply chain security initiatives including dependency governance and artifact management.
• Assist with CI/CD pipeline security reviews and implementation of security controls.
• Perform threat modeling and security reviews for new applications and services.
• Analyze security findings and support risk-based prioritization.
• Contribute to development of standards, procedures, and technical guidance.
• Participate in incident investigations involving application or software supply chain security issues.
• Support cloud application security reviews across Azure, AWS, and GCP environments.
• Develop scripts and automation to improve security operations and developer experience.

Descrição da oferta de emprego

• Perform application security assessments including SAST, SCA, DAST, API security, secrets detection, and secure code reviews.
• Support onboarding and operation of application security platforms and scanning solutions.
• Assist development teams in remediation of vulnerabilities and secure coding practices.
• Help integrate security controls into GitHub, Azure DevOps, Jenkins, and developer workflows.
• Support software supply chain security initiatives including dependency governance and artifact management.
• Assist with CI/CD pipeline security reviews and implementation of security controls.
• Perform threat modeling and security reviews for new applications and services.
• Analyze security findings and support risk-based prioritization.
• Contribute to development of standards, procedures, and technical guidance.
• Participate in incident investigations involving application or software supply chain security issues.
• Support cloud application security reviews across Azure, AWS, and GCP environments.
• Develop scripts and automation to improve security operations and developer experience.