S&P Global - Annapolis, MD
posted 4 months ago
The Director of Application Security Engineering at S&P Global is a pivotal role focused on safeguarding the integrity of applications and services within the S&P Ratings technology platforms. This position is designed for a senior security engineer who will lead a team dedicated to the development and implementation of security architecture and engineering best practices. The primary mission of the S&P Ratings Security team is to protect clients and users from modern security threats by creating innovative solutions to address significant security challenges. The successful candidate will be responsible for providing security engineering and architecture consultation, particularly in the context of GenAI applications, ensuring that security is integrated into the software development lifecycle (SDLC). In this role, the Director will collaborate with various teams, including software development, quality assurance (QA), site reliability engineering (SRE), and operations, to identify technical risks at both the component and system levels. This includes evaluating critical failure points, determining necessary security controls, and prioritizing these controls in alignment with application development timelines. The Director will also be instrumental in driving the Secure SDLC roadmap and enhancing the security engineering program, developing security tooling, and mentoring team members. This position requires a blend of managerial and technical skills, as the Director will provide architectural guidance on best practices, drive the specification and realization of security architecture, and assist in the development and maintenance of application security strategies, including those related to GenAI. The role also involves performing threat modeling, secure code reviews, and secure design reviews for high-risk applications, as well as conducting vulnerability research and serving as a technical advisor for new technologies and applications. The Director will guide development and SRE teams in building secure cloud-native applications, ensuring that security best practices are incorporated throughout the development process. This position is critical in maintaining the security posture of S&P Ratings and ensuring that applications are developed with security as a foundational element.