The Security Engineer, Secure Development is responsible for establishing, leading, and enforcing security standards for all internally developed software, automation, and AI enabled solutions prior to customer delivery or internal production use.
Responsibilities
Establish and enforce secure development standards for internal applications, platforms, automation, and tooling
Perform and oversee manual and automated code reviews (static, dynamic, dependency, and supply chain analysis)
Lead enterprise DevSecOps architecture, strategy, and standards to enable secure, scalable software delivery across S&P Global’s global development teams.
Compensation
S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000.
Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy
Embed automated security controls across the full software development lifecycle
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply‑chain security
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept
Drive platform reliability, resilience, and operational readiness through measurable engineering practices
Requirements
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience
Nice to have: Regulated or security‑sensitive enterprise environment
Nice to have: Managed container orchestration services
Lead a specialized engineering division focused on AI, application security, secure software development, and emerging technologies within the New York City Police Department.
Responsibilities
Direct the division’s engineering strategy, technical priorities, and operations, advancing secure, scalable, and cost-effective technology solutions.
Oversee the secure architecture and integration of enterprise AI platforms, including AI gateways, model access controls, orchestration, data protection, and safeguards against emerging AI threats.
Establish and enforce engineering standards, architectural safeguards, and security controls across emerging technologies and development environments.
Lead application security and DevSecOps practices, including vulnerability management, secrets detection, automated security testing, and software supply-chain protection.
Direct engineering standards and security controls for the enterprise development hub, including CI/CD practices and AI-assisted development tools such as GitHub Copilot.
Requirements
Baccalaureate degree from an accredited college or university
Senior Security Engineer specializing in application security and penetration testing to protect Nasuni’s enterprise data infrastructure and SaaS products.
Responsibilities
Conduct threat modeling, secure design and targeted code reviews for web applications, APIs, cloud services and appliances.
Perform manual and tool-assisted penetration testing; document reproducible findings and verify fixes.
A hands-on technical role focused on securing the Paymentus SaaS platform by partnering with engineering teams to identify and remediate risks across web apps, APIs, microservices, and AI-enabled components.
Compensation
$110k-$150k
Responsibilities
Perform application security reviews for Paymentus SaaS platform applications, services, APIs, and supporting application infrastructure.
Partner with software engineering teams to embed security into the software development lifecycle (requirements, architecture, design, development, testing, deployment, and post-release).
Conduct threat modeling and secure architecture reviews for web applications, RESTful APIs, microservices, cloud-native services, AI-enabled features, and integrations.
Review source code and application design for services written primarily in Java, NodeJS, Python, and Golang.
Identify, validate, and help remediate common application security vulnerabilities (injection flaws, broken access control, authentication weaknesses, authorization bypasses, insecure deserialization, SSRF, XXE, XSS, CSRF, business logic flaws, insecure file handling, secrets exposure, and sensitive data leakage).
Lead and design enterprise-grade security solutions, governance, risk assessment, and compliance for a highly regulated financial environment.
Locations (2)
Melbourne, Victoria, Australia
Victoria, Australia
Compensation
Salary: AUD 150,742– 171,215 Annual Gross
Responsibilities
Lead the design, implementation, and maintenance of secure-by-default design patterns and blueprints such as Zero Trust reference architectures
Define and govern secure landing zones, network security controls, and secure configuration standards across hybrid- and multi-cloud environments
Establish security guardrails, risk assessments, and secure usage patterns for emerging technologies including GenAI/AI-assisted coding tools
Partner with DevSecOps and Platform Engineering to automate secure front door and self-service delivery processes embedding automated scanning (SAST/DAST/SCA), secrets discovery, and compliance checks into build pipelines
Senior DevSecOps Engineer responsible for integrating security controls into CI/CD pipelines, managing threat modeling, and ensuring secure application development within a gaming company.
Responsibilities
Integrate and operate application security controls within CI/CD pipelines
Support secure SDLC practices such as branch protection and quality gates
Assist with threat modelling and secure design reviews
Support developers in vulnerability triage and remediation
Associate Director, DevSecOps ArchitectNewS&P Global · Princeton, US
DevSecOps Senior Automation Platform EngineerCaci · Aberdeen Proving Ground, US
Senior Security Engineer - Application SecurityNasuni · Remote, US
Principal ConsultantInfosys · Melbourne, Australia+1 more