Lead enterprise DevSecOps architecture, strategy, and standards to enable secure, scalable software delivery across S&P Global’s global development teams.
Compensation
S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000.
Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy
Embed automated security controls across the full software development lifecycle
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply‑chain security
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept
Drive platform reliability, resilience, and operational readiness through measurable engineering practices
Requirements
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience
Nice to have: Regulated or security‑sensitive enterprise environment
Nice to have: Managed container orchestration services
The role helps strengthen the organization’s application security posture by executing security testing, assessing vulnerabilities, and partnering with application and engineering teams to drive effective remediation.
Compensation
Competitive compensation, including base pay and annual incentive
Review application security findings, validate risk and severity, and support prioritization, remediation, retesting, and closure.
Partner with application development and engineering teams to explain security findings, recommend practical remediation approaches, and track vulnerabilities through resolution.
Support Application Security platforms and services through security test execution, issue analysis, operational monitoring, troubleshooting, and adherence to established processes.
Apply established security standards, controls, and governance requirements across secure development and application security testing activities.
Lead technical remediation and enablement for software vulnerabilities across enterprise application teams, driving code-level fixes, dependency patching, containerization, and CI/CD optimization.
Responsibilities
Write, refactor, and review application code to remediate SAST findings
Resolve third‑party library and framework upgrades and dependency conflicts
Implement automated unit, integration, and regression tests
Write and optimize Dockerfiles, container manifests, and base image configurations
Assist squads in containerizing legacy services and establishing automated rebuild triggers
Requirements
Bachelor’s Degree in Computer Science, Software Engineering, Information Systems, or related technical field
Position:
Senior Engineer [Embedded C/Linux]
Job Description:
• Experience working with Embedded Linux Application programming.
• Strong knowledge for Linux OS, Inter Process Communication, and multi-threaded/multi-process application development.
• Programming skill:
o C à Advanced
o Scripting (Shell/Python) -> Intermediate
o C++ à Intermediate
• Familiarity working with development tools like GDB, Velgrin, SCA Tools, GIT, SVN, JIRA.
• Experience working with various build systems like, Jenkins, etc
• Experience working with different embedded platform like ARM/PowerPC processor and DSP based on Qualcomm, TI, NXP, NVIDIA, Intel processors
• Strong sense of ownership, passionate, fast learner, analytical mind set.
• * Ability to closely work with electrical team
• Strong sense of ownership, passionate, fast learner, analytical mind set, perfection seeker.
Location:
IN-GJ-Ahmedabad, India-Ognaj (eInfochips)
Time Type:
Full time
Job Category:
Engineering Services
Associate Director, DevSecOps ArchitectNewS&P Global · Princeton, US
Application Security Senior AssociateDTCC · Tampa, US