Senior Analyst Application Security
S&P Global15 hours ago
Hyderābād, IndiaSenior
Responsibilities
- Lead application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
- Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native developer workflows.
- Perform threat modeling and security design reviews for applications, APIs, and cloud services.
- Design and implement AI-enabled application security tools, agents, and automations for testing, triage, and remediation.
- Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable SDLC controls.
- Provide technical leadership and mentoring while contributing to enterprise standards, procedures, and audit-ready documentation.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent professional experience.
- At least 6 years of experience in application security, DevSecOps, secure software engineering, or penetration testing.
- Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
- Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
- Hands-on experience using generative AI and AI-assisted development tools to build security tools, scripts, integrations, or automations.
- Ability to lead technical engagements, communicate security risks, and drive remediation across distributed engineering teams.
- Strong analytical, problem-solving, communication, presentation, leadership, and mentoring skills.
- Preferred experience with Model Context Protocol, AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure enterprise AI integrations.
- Preferred cloud application security experience across AWS, Azure, and GCP.
- Preferred scripting and automation experience with Python, PowerShell, or similar languages.
- Preferred experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.
Benefits
- Health care coverage and wellness benefits.
- Generous paid time off and flexible downtime.
- Continuous learning resources and career development support.
- Competitive pay, retirement planning, continuing education, company-matched student loan contributions, and financial wellness programs.
- Family-friendly benefits and perks.
- Retail discounts and referral incentive awards.