Associate Director, AI-Enabled Application Security

S&P Global Inc.; New York (NY); On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Health & Wellness

Flexible time off

Continuous learning

Retirement + education support

Family perks

Job summary

The S&P Global SGA Application Security team seeks an experienced security leader to advance application security across the enterprise. You will drive testing, secure coding practices, and AI-enabled security capabilities in partnership with engineering and risk stakeholders.

You will mentor analysts, shape enterprise standards, and deliver audit-ready documentation while integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native environments to reduce risk and enable

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or Engineering.
• 6+ years of experience in Application Security, DevSecOps, secure software.
• Proficiency in application security testing methodologies including SAST, SCA, DAST, threat modeling, and CI/CD security integration.
• Experience integrating security controls into GitHub, Azure DevOps, Jenkins, or cloud-native delivery environments.
• Experience using generative AI and AI-assisted development tools to build custom security tooling, scripts, integrations, or automations.

Responsibilities

• Lead complex application security assessments across SAST, SCA, DAST, API security, secrets detection, and threat modeling.
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms.
• Perform threat modeling and security design reviews for new applications, APIs, and cloud services.
• Design and implement AI-enabled Application Security capabilities with custom tools and automations.
• Partner with cross-functional teams to resolve systemic application risks and establish scalable security controls across the SDLC.
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to audit-ready documentation.

Skills

Application Security

DevSecOps

Secure software

Education

Bachelor's degree in Cybersecurity, Computer Science, or Engineering

Tools

GitHub

Azure DevOps

Jenkins

Cloud-native platforms

Python

PowerShell

Job description

The S&P Global SGA Application Security team seeks an experienced security leader to advance application security across the enterprise. You will drive testing, secure coding practices, and AI-enabled security capabilities in partnership with engineering and risk stakeholders.

You will mentor analysts, shape enterprise standards, and deliver audit-ready documentation while integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native environments to reduce risk and enable