Senior Application Security Lead - AI-Driven DevSecOps Champion

S&P Global; Princeton (NJ); Presencial; USD 120.000 - 150.000; Jornada completa

Descripción de la vacante

S&P Global is seeking an experienced security professional to lead complex application security assessments and integrate security into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms. The role emphasizes threat modeling, secure design reviews, and AI-assisted security tooling.

The candidate will mentor security analysts, influence enterprise standards, and drive governance-aligned security across the SDLC in a fast-paced environment.

Formación

• Bachelor's degree in Cybersecurity, Computer Science, Engineering or related field, or equivalent professional experience.
• 6+ years in Application Security, DevSecOps, secure software engineering, or penetration testing.
• Experience integrating security tests into CI/CD with GitHub, Azure DevOps, Jenkins, and cloud-native platforms.

Responsabilidades

• Lead complex application security assessments across SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate security vulnerabilities.
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices.
• Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions.
• Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations that improve security testing, triage, and remediation while meeting enterprise governance standards.
• Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC.
• Provide technical leadership and mentoring to security analysts and engineering partners while contributing to enterprise standards, procedures, and audit-ready documentation.

Conocimientos

SAST

SCA

DAST

Threat modeling

Secure design principles

CI/CD security practices

Generative AI usage

Leadership & mentoring

Communication skills

Educación

Bachelor's degree in Cybersecurity/CS/Engineering or equivalent

Herramientas

GitHub

Azure DevOps

Jenkins

Cloud-native platforms

AI tooling integrations

Descripción del empleo

S&P Global is seeking an experienced security professional to lead complex application security assessments and integrate security into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms. The role emphasizes threat modeling, secure design reviews, and AI-assisted security tooling.

The candidate will mentor security analysts, influence enterprise standards, and drive governance-aligned security across the SDLC in a fast-paced environment.