Senior Application Security Lead & Architect

S&P Global; New York (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health and Wellness benefits

Flexible time off

Professional development support

Retirement savings program

Job summary

S&P Global is seeking an experienced Application Security leader to partner with engineering teams globally. You will drive complex security assessments, integrate controls into GitHub, Azure DevOps, and Jenkins, and shape secure architecture decisions for cloud-native services.

You will also design AI-enabled security capabilities and guide cross-functional teams while contributing to enterprise standards and audit-ready documentation.

Qualifications

• Bachelor’s degree or equivalent professional experience in a relevant field.
• 6+ years in Application Security, DevSecOps, secure software engineering, or pen testing.
• Strong knowledge of SAST, SCA, DAST, threat modeling, secure design, and CI/CD security practices.
• Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native environments.
• Experience using generative AI to build custom security tools, scripts, or automations.

Responsibilities

• Lead complex application security assessments across SAST, SCA, DAST, API security, secrets detection, and threat modeling.
• Drive security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud platforms.
• Perform threat modeling and security design reviews for new apps, APIs, and cloud services.
• Design and implement AI-enabled Application Security capabilities and automations.
• Mentor security analysts and engineering partners while contributing to enterprise standards and audit-ready docs.

Skills

Security leadership

Experience in AppSec

Stakeholder communication

DevSecOps familiarity

Threat modeling

Cloud security

Education

Bachelor’s degree in Cybersecurity/CS/Engineering

Tools

GitHub

Azure DevOps

Jenkins

Cloud-native delivery

Job description

S&P Global is seeking an experienced Application Security leader to partner with engineering teams globally. You will drive complex security assessments, integrate controls into GitHub, Azure DevOps, and Jenkins, and shape secure architecture decisions for cloud-native services.

You will also design AI-enabled security capabilities and guide cross-functional teams while contributing to enterprise standards and audit-ready documentation.