Lead Application Security Engineer: AI-Driven DevSecOps

S&P Global Inc.; Princeton (NJ); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

The S&P Global SGA Application Security team seeks a senior security expert to lead complex application security assessments across SAST, SCA, DAST, API security, and threat modeling. You will drive secure coding practices, integrate controls into GitHub, Azure DevOps, Jenkins, and cloud-native environments, and mentor engineers.

You’ll design AI-enabled security capabilities, guide architecture decisions, and collaborate with product, cloud, and risk teams to reduce risk while enabling

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience.
• 6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing with hands-on technical expertise.
• Strong knowledge of application security testing methodologies including SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
• Experience integrating security controls into development platforms such as GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
• Practical experience using generative AI and AI-assisted development tools to build custom security tools, scripts, integrations, or automations.

Responsibilities

• Lead complex application security assessments across SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate security vulnerabilities.
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices.
• Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions.
• Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations that improve security testing, triage, and remediation while meeting enterprise governance standards.
• Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC.
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to enterprise standards, procedures, and audit-ready documentation.

Skills

Application Security

DevSecOps

Secure software engineering

Threat modeling

AI in security

Leadership

Communication

Education

Bachelor's degree in Cybersecurity/CS

Tools

GitHub

Azure DevOps

Jenkins

Job description

The S&P Global SGA Application Security team seeks a senior security expert to lead complex application security assessments across SAST, SCA, DAST, API security, and threat modeling. You will drive secure coding practices, integrate controls into GitHub, Azure DevOps, Jenkins, and cloud-native environments, and mentor engineers.

You’ll design AI-enabled security capabilities, guide architecture decisions, and collaborate with product, cloud, and risk teams to reduce risk while enabling