Senior Application Security Lead — AI & DevSecOps

S&P Global; Dallas (TX); Sur place; USD 120 000 - 150 000; Plein temps

Avantages offerts par ce poste

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Résumé du poste

S&P Global's SGA Application Security team partners with engineering to reduce risk while enabling innovation. The role focuses on complex security assessments, integrating controls into GitHub, Azure DevOps, and Jenkins, and shaping secure architecture for cloud services.

With 6+ years in security, you will mentor analysts, drive secure coding practices, and lead AI-enabled security tool development to meet governance standards.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience.
• 6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing with hands-on technical expertise.
• Strong knowledge of application security testing methodologies including SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
• Experience integrating security controls into development platforms such as GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.]
• Practical experience using generative AI and AI-assisted development tools to build custom security tools, scripts, integrations, or automations.

Responsabilités

• Lead complex application security assessments across multiple testing methodologies including SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate security vulnerabilities
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices
• Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions
• Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations that improve security testing, triage, and remediation while meeting enterprise governance standards
• Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to enterprise standards, procedures, and audit-ready documentation

Connaissances

Application Security

DevSecOps

Threat Modeling

CI/CD Security

AI Security Tools

Security Architecture

Stakeholder Communication

Mentoring

Formation

Bachelor's degree in Cybersecurity/CS/Engineering

Outils

GitHub

Azure DevOps

Jenkins

Cloud-native tools

Description du poste

S&P Global's SGA Application Security team partners with engineering to reduce risk while enabling innovation. The role focuses on complex security assessments, integrating controls into GitHub, Azure DevOps, and Jenkins, and shaping secure architecture for cloud services.

With 6+ years in security, you will mentor analysts, drive secure coding practices, and lead AI-enabled security tool development to meet governance standards.