Lead, Application Security & AI-Driven DevSecOps

S&P Global; New York (NY); On-site; USD 130,000 - 190,000; Full time

Job summary

S&P Global seeks a senior Application Security professional to lead assessments across SAST, SCA, DAST, and threat modeling. You will embed security controls into developer workflows (GitHub, Azure DevOps, Jenkins) and lead AI-enabled security tooling initiatives across multi-cloud environments.

You will mentor teams, shape secure design reviews, and partner with product, cloud, and risk stakeholders to enforce scalable security controls throughout the SDLC.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or Engineering.
• 6+ years of experience in Application Security, DevSecOps, secure software.
• Demonstrated proficiency in SAST, SCA, DAST, threat modeling, and CI/CD security integration.
• Experience integrating security controls into GitHub, Azure DevOps, Jenkins or cloud-native delivery environments.
• Experience using generative AI to build custom security tooling, scripts, integrations, or automations.

Responsibilities

• Lead complex application security assessments across SAST, SCA, DAST, API security, secrets detection, and threat modeling.
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms.
• Perform threat modeling and security design reviews for new apps, APIs, and cloud services.
• Design and implement AI-enabled Application Security capabilities with tools, agents, and automations.
• Mentor security analysts and engineering partners while contributing to enterprise standards and audit-ready documentation.

Skills

6+ years experience

Application Security

DevSecOps

AI tooling

Secure software

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

GitHub

Azure DevOps

Jenkins

Cloud-native platforms

Python

PowerShell

Job description

S&P Global seeks a senior Application Security professional to lead assessments across SAST, SCA, DAST, and threat modeling. You will embed security controls into developer workflows (GitHub, Azure DevOps, Jenkins) and lead AI-enabled security tooling initiatives across multi-cloud environments.

You will mentor teams, shape secure design reviews, and partner with product, cloud, and risk stakeholders to enforce scalable security controls throughout the SDLC.