S&P Global

Application Security Lead

S&P Global
Apply
2 days ago
Princeton, NJ, USA +2 moreStaff+
H1B sponsor

Base Salary

$120k - $150k/yr

Responsibilities

  • Lead application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
  • Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native developer workflows.
  • Perform threat modeling and security design reviews for applications, APIs, and cloud services.
  • Design and implement AI-enabled application security tools, agents, and automations for testing, triage, and remediation.
  • Partner with engineering, product, cloud, and risk stakeholders to address systemic application risks and establish scalable SDLC controls.
  • Provide technical leadership and mentoring while contributing to enterprise standards, procedures, and audit-ready documentation.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent professional experience.
  • At least 6 years of experience in application security, DevSecOps, secure software engineering, or penetration testing.
  • Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
  • Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
  • Hands-on experience using generative AI and AI-assisted development tools to build security tools, scripts, integrations, or automations.
  • Ability to lead technical engagements, communicate security risks, drive remediation, and mentor technical partners.
  • Preferred: knowledge of Model Context Protocol, AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure enterprise AI integrations.
  • Preferred: multi-cloud application security experience with AWS, Azure, and GCP.
  • Preferred: scripting experience with Python, PowerShell, or similar languages.
  • Preferred: experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.

Benefits

  • Health care coverage and wellness support.
  • Generous paid time off and flexible downtime.
  • Continuous learning resources and career development support.
  • Retirement planning, continuing education, company-matched student loan contributions, and financial wellness programs.
  • Family-friendly benefits and perks.
  • Retail discounts and referral incentive awards.

Tech Stack

Categories

Contact me