The US national base salary range for this position is from $104,300.00 - $193,700.00
Responsibilities
Work with DevOps teams to design, implement, and maintain secure CI/CD pipelines that integrate security testing at every stage of the software development lifecycle
Implement and tune automated security scanning, including SAST, DAST, SCA, and container scanning
Deploy and support API security tools, ensuring findings are consistently reported to a central aggregator
Collaborate with development teams to promote secure coding practices and provide security guidance throughout the development process
Evaluate and help govern the secure use of agentic AI coding tools across engineering teams, establishing guardrails and detection strategies to mitigate risks such as hallucinated dependencies, injected vulnerabilities, and insufficient oversight
Lead and manage the SecOps team, overseeing security operations, incident response, vulnerability management, and ISO 27001 compliance for a full-cloud ad tech platform.
Lead enterprise DevSecOps architecture, strategy, and standards to enable secure, scalable software delivery across S&P Global’s global development teams.
Compensation
S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000.
Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy
Embed automated security controls across the full software development lifecycle
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply‑chain security
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept
Drive platform reliability, resilience, and operational readiness through measurable engineering practices
Requirements
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience
Nice to have: Regulated or security‑sensitive enterprise environment
Nice to have: Managed container orchestration services
Senior Security Engineer responsible for building AI-driven security automation, securing the SDLC, cloud and identity, and incident response at Gelato.
Responsibilities
Automate code and change review, alert triage, finding validation, investigation summaries and routing to owners using AI agents
Secure the SDLC by owning SAST, SCA, secret, container and IaC scanning
Assess and audit cloud and container platform security, including IAM, guardrails, cluster hardening and runtime detection
Lead incidents end to end, including containment, investigation, communication and blameless write-ups
Write response playbooks for routine steps and escalation
SecOps ManagerEquativ · Paris, France
Associate Director, DevSecOps ArchitectS&P Global · Princeton, US
AI Security EngineerAmazon · Jessup, US+2 more
Senior Cloud & Application Security EngineerAXON-Networks · Irvine, US+1 more
Application Security EngineerArdent · Remote
Senior Security EngineerGelato · Stockholm
Security Engineer, Vulnerability ManagementLiveKit · Remote, US