Application Security Lead

S&P Global

. Lead complex application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling .

Posted 10/15/2026full-timeUnited StatesSenior💰 $120,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, including SAST, SCA, DAST, and secure software engineering practices. Capable of leading security assessments, integrating security controls into CI/CD pipelines, and providing strategic guidance on secure architecture.

Highest-signal resume keywords

Application SecuritySASTDASTDevSecOpsThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTSCADASTThreat ModelingSecure Design PrinciplesCI/CD Security PracticesCustom Security ToolsAutomationRisk-Based Quality GatesCloud Application Security

Soft Skills

Analytical AbilitiesProblem-SolvingCommunication SkillsLeadershipMentoring

Tools & Technologies

GitHubAzure DevOpsJenkinsCloud-Native PlatformsGenerative AIAI-Assisted Development ToolsPythonPowerShellAWSGCP

Certifications & Qualifications

Bachelor's Degree in CybersecurityBachelor's Degree in Computer ScienceBachelor's Degree in Engineering

Industry Keywords

Application Security AssessmentsSecure Coding PracticesEnterprise Governance StandardsSoftware Supply Chain SecurityDependency Governance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJenkinsPythonSDLC

About the role

Key responsibilities & impact

Lead complex application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling
Integrate security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms
Implement risk-based quality gates to enhance secure coding practices
Perform threat modeling and security design reviews for applications, APIs, and cloud services
Provide strategic guidance on secure architecture decisions
Design and implement AI-enabled Application Security capabilities, including custom tools, agents, and automations
Improve security testing, triage, and remediation while meeting enterprise governance standards
Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks
Establish scalable security controls across the SDLC
Provide technical leadership and mentoring to security analysts and engineering partners
Contribute to enterprise standards, procedures, and audit-ready documentation

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience
6+ years of experience in Application Security, DevSecOps, secure software engineering, or penetration testing
Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices
Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments
Practical experience using generative AI and AI-assisted development tools to build custom security tools, scripts, integrations, or automations
Ability to lead technical engagements, communicate complex security risks to senior stakeholders, and drive remediation across distributed engineering teams
Strong analytical and problem-solving abilities with attention to detail
Excellent communication and presentation skills for technical and non-technical audiences
Leadership and mentoring capabilities with collaborative team approach
Adaptability to fast-paced, evolving technology environments
Preferred: Knowledge of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure integration of AI with enterprise platforms
Preferred: Experience with cloud application security across AWS, Azure, and GCP
Preferred: Strong automation capabilities using Python, PowerShell, or similar scripting languages
Preferred: Experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption

Benefits

Comp & perks

Health care coverage designed for the mind and body
Generous time off
Access to continuous learning and career development resources
Competitive pay
Retirement planning
Continuing education program
Company-matched student loan contribution
Financial wellness programs
Family benefits for partners and children
Retail discounts
Referral incentive awards