AI-Driven Application Security Lead

S&P Global; Boulder (CO); Presencial; USD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Descripción de la vacante

S&P Global's SGA Application Security team seeks a senior security professional to lead complex assessments and embed robust security controls across DevOps and cloud environments. You will mentor engineers, design AI-assisted security capabilities, and collaborate with product, cloud, and risk stakeholders to reduce risk while enabling rapid innovation.

You will influence secure architectures, guide threat modeling, and drive governance-aligned security testing across multiple platforms,

Formación

• Bachelor’s degree or equivalent in a relevant field with strong security background.
• 6+ years of hands-on experience in application security, DevSecOps, or secure software engineering.
• Proficiency with SAST, SCA, DAST, threat modeling, secure design, and CI/CD security.
• Experience embedding security controls in GitHub, Azure DevOps, Jenkins and cloud-native environments.
• Practical use of AI-assisted development tools to build security tools or automations.

Responsabilidades

• Lead complex application security assessments across SAST, SCA, DAST, API security and threat modeling.
• Integrate security controls into developer workflows and establish risk-based quality gates.
• Perform threat modeling and security design reviews for new apps, APIs, and cloud services.
• Design and implement AI-enabled security capabilities to improve testing, triage, and remediation.
• Partner with cross-functional teams to resolve systemic risks and implement scalable controls.
• Provide leadership and mentoring to security analysts and engineers; contribute to audit-ready docs.

Conocimientos

Application Security

DevSecOps

Threat Modeling

Secure Software Engineering

Penetration Testing

AI Tooling

Educación

Bachelor's degree in Cybersecurity, Computer Science, Engineering or related field

Herramientas

GitHub

Azure DevOps

Jenkins

Descripción del empleo

S&P Global's SGA Application Security team seeks a senior security professional to lead complex assessments and embed robust security controls across DevOps and cloud environments. You will mentor engineers, design AI-assisted security capabilities, and collaborate with product, cloud, and risk stakeholders to reduce risk while enabling rapid innovation.

You will influence secure architectures, guide threat modeling, and drive governance-aligned security testing across multiple platforms,