Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Application Security Lead role.
Rezi rewrites your resume against S&P Global's job description. Free.
Tailor your resume to this Application Security Lead role.
Rezi rewrites your resume against S&P Global's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Application Security Lead posting at S&P Global — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Application Security Lead posting at S&P Global — free, in seconds.
About the Role
The SGA Application Security team partners strategically to reduce risk and enable innovation through Application Security, DevSecOps, Exposure Management, and AI Security. We foster a collaborative, fast-paced culture focused on automation, developer partnership, and continuous learning in emerging technologies, offering exposure to enterprise-wide security transformation and AI-powered security tools.
Responsibilities
- Lead complex application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
- Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms.
- Perform threat modeling and security design reviews for new applications, APIs, and cloud services.
- Design and implement AI-enabled Application Security capabilities, including custom tools, agents, and automations.
- Partner with cross-functional teams to resolve systemic application risks and establish scalable security controls.
- Provide technical leadership and mentoring to security analysts and engineering partners.
- Contribute to enterprise standards, procedures, and audit-ready documentation.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience.
- 6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing.
- Strong knowledge of application security testing methodologies (SAST, SCA, DAST, threat modeling, secure design principles, CI/CD security).
- Experience integrating security controls into development platforms (GitHub, Azure DevOps, Jenkins, cloud-native).
- Practical experience using generative AI and AI-assisted development tools for security tools, scripts, integrations, or automations.
- Ability to lead technical engagements and communicate complex security risks to senior stakeholders.
- Strong analytical and problem-solving abilities with attention to detail.
- Excellent communication and presentation skills for technical and non-technical audiences.
- Leadership and mentoring capabilities with a collaborative team approach.
- Adaptability to work in fast-paced, evolving technology environments.
- Knowledge of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure integration of AI with enterprise platforms.
- Experience with cloud application security across multi-cloud environments (AWS, Azure, GCP) and cloud-native security controls.
- Strong automation capabilities and experience improving security operations at enterprise scale using scripting languages (Python, PowerShell, or similar).
- Experience with software supply chain security initiatives (dependency governance, artifact management, provenance validation, trusted package consumption).
Skills
- SAST
- SCA
- DAST
- API security
- Secrets detection
- Threat modeling
- Secure design principles
- CI/CD security
- GitHub
- Azure DevOps
- Jenkins
- Cloud-native platforms
- Generative AI
- AI-assisted development tools
- Python
- PowerShell
- AWS
- Azure
- GCP
- Model Context Protocol (MCP)
- AI agents
- Agentic architectures
- Tool calling
- Retrieval-augmented generation
- Software supply chain security
- Dependency governance
- Artifact management
- Provenance validation
- Trusted package consumption
Experience Level
- 6+ years of experience
Education Level
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience.
Salary/Compensations
- $120,000 to $150,000
Benefits
- Health care coverage designed for the mind and body.
- Generous time off.
- Access to resources for career growth and learning.
- Competitive pay.
- Retirement planning.
- Continuing education program with a company-matched student loan contribution.
- Financial wellness programs.
- Family perks and benefits.
- Retail discounts.
- Referral incentive awards.
About the Company
- Advancing Essential Intelligence.
- We are more than 35,000 strong worldwide, driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future.
- We are committed to a more equitable future and to helping our customers find new, sustainable ways of doing business.
- Our Values: Integrity, Discovery, Partnership.
- Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions.
- We start with a foundation of integrity, bring a spirit of discovery, and collaborate in close partnership with each other and our customers.
Equal Opportunity
- S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law.
- Only electronic job submissions will be considered for employment.
- If you need an accommodation during the application process due to a disability, please send an email to: EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.