Associate Director - Application Security
S&P Global1 day ago
Hyderābād, India +3 moreMid Level / Senior
H1B sponsor
Base Salary
$125k - $165k/yr
Responsibilities
- Design, deploy, and operate enterprise artifact repository platforms for cloud and hybrid environments.
- Define package curation, promotion, waiver, approval, trust, provenance, immutability, and versioning controls for artifacts and dependencies.
- Integrate artifact repositories and security controls with GitHub, Jenkins, and Azure DevOps pipelines.
- Develop automation and policy-as-code for artifact lifecycle management, approvals, and governance.
- Secure AI/ML and GenAI workloads, including LLM usage, secrets, tokens, APIs, model access, and AI-specific threat protections.
- Establish secure-by-design AI application architectures and support Responsible AI governance, auditability, and traceability.
- Monitor software supply chain and AI-related risks, support security investigations, and drive continuous improvement.
- Create documentation, standards, and enablement materials for secure developer adoption.
Requirements
- 3–6 years of experience in DevSecOps, platform security, or software supply chain security.
- Strong hands-on experience deploying and architecting JFrog Artifactory in enterprise environments.
- Experience designing package curation and promotion models and implementing dependency and artifact waiver and approval workflows.
- Understanding of AI/ML, Generative AI, LLMs, model lifecycles, Responsible AI principles, and AI governance frameworks.
- Knowledge of AI/ML security risks including prompt injection, data poisoning, model evasion, and data leakage.
- Experience integrating AI or ML components into applications or pipelines is preferred.
- Strong application security and dependency risk management knowledge.
- Hands-on experience integrating repositories with GitHub, Jenkins, and Azure DevOps pipelines.
- Experience working in cloud environments, preferably Azure; AWS or GCP experience is acceptable.
- Proficiency with automation and scripting such as Python, Groovy, and Terraform.
- Knowledge of modern SDLC and DevSecOps operating models.
Benefits
- Health care coverage and wellness benefits.
- Generous paid time off and flexible downtime.
- Continuous learning and career development resources.
- Retirement planning, continuing education, company-matched student loan contributions, and financial wellness programs.
- Family-focused benefits and perks.
- Retail discounts and referral incentive awards.
- The posting lists a London, United Kingdom location; compensation information is provided for US candidates only.