Application Security Lead

Home > Python programming jobs

Application Security Lead in USA

S&P Global
Full time
Email

USA
10/20/2026
Report

Princeton, NJ

Responsibilities

Lead application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native delivery platforms.
Perform threat modeling and security design reviews for applications, APIs, and cloud services.
Design and implement AI-enabled application security tools, agents, scripts, integrations, and automations.
Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable SDLC controls.
Provide technical leadership and mentoring while contributing to enterprise standards, procedures, and audit-ready documentation.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent professional experience.
At least 6 years of experience in application security, DevSecOps, secure software engineering, or penetration testing.
Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
Practical experience using generative AI and AI-assisted development tools to build security tools, scripts, integrations, or automations.
Ability to lead technical engagements, communicate security risks to senior stakeholders, and drive remediation across distributed engineering teams.
Strong analytical, problem-solving, communication, presentation, leadership, and mentoring skills.
Preferred experience with Model Context Protocol, AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure enterprise AI integrations.
Preferred experience with AWS, Azure, and GCP cloud application security and cloud-native security controls.
Preferred scripting experience with Python, PowerShell, or similar languages.
Preferred experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.

Benefits

Health care coverage, generous time off, continuous learning resources, retirement planning, continuing education support, company-matched student loan contributions, financial wellness programs, family benefits, retail discounts, and referral incentive awards are provided; benefits vary by country.

Salary: $120k - $150k/yr

S&P Global

S&P Global delivers trusted market intelligence and analytics that help investors, corporations, and governments make informed decisions. With a focus on data accuracy and insight-driven analysis, the company empowers clients to navigate complex financial landscapes and drive sustainable growth. ...

Similar positions

Staff, Security Engineer (Authentication & Access)

Coupang
Full time

Others
11/11/2026

Seoul, Korea

Senior Security Automation Software Engineer

Epic Games
Full time

USA
11/11/2026

Cary, NC

Lead Quality Engineer

Cognizant
Full time

Others
11/11/2026

Hyderābād, India

Security Engineer, IAM

Dropbox
Full time

USA
11/11/2026
Salary: $194k - $262k/yr

Remote

Security Engineer II

Amazon
Full time

USA
11/11/2026
Salary: $159k - $202k/yr

Austin, TX