Application Security Lead — AI-Driven DevSecOps Champion

S&P Global, Inc.; Princeton (NJ); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health coverage

Flexible time off

Continuous learning

Retirement planning

Student loan contribution

Family perks

Job summary

S&P Global is seeking a senior Application Security professional to lead complex assessments and shape secure software within a multi-cloud environment. You will drive integrated security controls across GitHub, Azure DevOps, Jenkins, and CI/CD pipelines, guiding architecture decisions and team seniors.

The role emphasizes AI-enabled security tooling, threat modeling, and collaboration with engineering, product, cloud, and risk stakeholders to scale secure SDLC practices enterprise-wide.

Qualifications

• Bachelor's degree or equivalent professional experience in cybersecurity, CS, or engineering.
• 6+ years of hands-on experience in Application Security, DevSecOps, or related fields.
• Strong knowledge of SAST, SCA, DAST, threat modeling, secure design, and CI/CD security.

Responsibilities

• Lead complex application security assessments across multiple testing methodologies.
• Integrate security controls into GitHub, Azure DevOps, Jenkins, and cloud-native platforms.
• Conduct threat modeling and security design reviews for new apps, APIs, and cloud services.
• Design and implement AI-enabled security capabilities for testing, triage, and remediation.
• Collaborate with engineering, product, cloud, and risk teams to mitigate systemic risks.
• Provide leadership and mentoring while contributing to audit-ready security documentation.

Skills

SAST

SCA

DAST

Threat Modeling

DevSecOps

CI/CD Security

AI Security Tools

Leadership

Education

Bachelor's in Cybersecurity or related

Tools

GitHub

Azure DevOps

Jenkins

Cloud Platforms

Job description

S&P Global is seeking a senior Application Security professional to lead complex assessments and shape secure software within a multi-cloud environment. You will drive integrated security controls across GitHub, Azure DevOps, Jenkins, and CI/CD pipelines, guiding architecture decisions and team seniors.

The role emphasizes AI-enabled security tooling, threat modeling, and collaboration with engineering, product, cloud, and risk stakeholders to scale secure SDLC practices enterprise-wide.