Embed security into the automation processes across the entire tech stack.
Compensation
Stipend: None initially. Based on your first-quarter performance, you may be offered a paid full-time opportunity, or even be absorbed directly by the client as an FTE.
Responsibilities
Integrate automated security scanning tools into CI/CD pipelines
Enforce secure Infrastructure-as-Code practices using Terraform
Manage and secure application deployment environment with Docker
Collaborate with development teams to promote secure coding practices
Implement automated injection and rotation of secrets using Vault
The Cloud Application Security Analyst performs application security testing, secure design and code reviews, vulnerability triage, threat modeling, and cloud security configuration support.
Compensation
Minimum $115,000 - Maximum $135,000 annually
Responsibilities
Perform static application security testing (SAST), dynamic application security testing (DAST), and targeted manual security reviews for web and mobile applications.
Review source code, APIs, application architectures, and cloud designs to identify security weaknesses before production release.
Triage, prioritize, document, and support remediation of vulnerabilities, including issues aligned with the OWASP Top 10.
Integrate automated security scanning and validation into CI/CD pipelines using platforms such as GitHub, GitLab, or Jenkins.
Conduct threat modeling for new features, applications, APIs, and microservices, and maintain supporting security evidence and diagrams.
Lead enterprise DevSecOps architecture, strategy, and standards to enable secure, scalable software delivery across S&P Global’s global development teams.
Compensation
S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000.
Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy
Embed automated security controls across the full software development lifecycle
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply‑chain security
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept
Drive platform reliability, resilience, and operational readiness through measurable engineering practices
Requirements
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience
Nice to have: Regulated or security‑sensitive enterprise environment
Nice to have: Managed container orchestration services
Security Analyst supporting the Department of State Consular Systems Modernization program, ensuring compliance with security requirements and managing accreditation and vulnerability processes.
Locations (2)
Herndon, Virginia, United States
Falls Church, Virginia, United States
Responsibilities
Ensure compliance with all systems security requirements and updates
Ensure Configuration Management for security-relevant software, hardware, and firmware is documented and maintained
Support ATO/certification and accreditation activities
Support and track resolving Vulnerability Alerts and Plan of Action and Milestones (POAMs)
Track status of all system ATOs and recertification efforts
Requirements
Bachelor's degree in a related field
Nice to have: Security controls and ATO process for cloud based environments
Security Analyst within PNC's Technology organization, responsible for evaluating and improving application security posture across multiple locations.
Cloud Application Security AnalystNewAkumen, Inc. · Washington, US
Associate Director, DevSecOps ArchitectS&P Global · Princeton, US
Security AnalystCreative Information Technology, Inc. · Herndon, US+1 more
Application Security AnalystPNC · Denver, US+5 more