S&P Global

Associate Director - Application Security

S&P Global
Apply
23 hours ago

Base Salary

$130k - $190k/yr

Responsibilities

  • Lead complex application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
  • Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native developer workflows.
  • Perform threat modeling and security design reviews for applications, APIs, and cloud services.
  • Design and implement AI-enabled application security tools, agents, scripts, integrations, and automations.
  • Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable SDLC controls.
  • Provide technical leadership and mentorship to security analysts and engineering partners.
  • Contribute to enterprise security standards, procedures, and audit-ready documentation.

Requirements

  • Bachelor's degree in Cybersecurity, Computer Science, or Engineering.
  • At least 6 years of experience in Application Security, DevSecOps, or secure software.
  • Proficiency in SAST, SCA, DAST, threat modeling, and CI/CD security integration.
  • Experience integrating security controls into GitHub, Azure DevOps, Jenkins, or cloud-native delivery environments.
  • Experience using generative AI and AI-assisted development tools to build custom security tooling, scripts, integrations, or automations.
  • Preferred experience with Model Context Protocol, AI agents, agentic architectures, tool calling, and retrieval-augmented generation.
  • Preferred experience with application security across AWS, Azure, and GCP in multi-cloud environments.
  • Proficiency in Python, PowerShell, or equivalent scripting languages.
  • Preferred experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.
  • Ability to communicate complex security risks to senior stakeholders and drive remediation across distributed engineering teams.
  • Experience providing technical mentorship within security or engineering teams.

Benefits

  • Health care coverage and wellness benefits.
  • Generous paid time off and flexible downtime.
  • Continuous learning and career development resources.
  • Retirement planning, continuing education support, company-matched student loan contributions, and financial wellness programs.
  • Family-friendly benefits and perks.
  • Retail discounts and referral incentive awards.

Tech Stack

Categories

Contact me