S&P Global is building enterprise security capabilities that help teams ship faster with less risk. In this onsite role in Dallas, TX, you will lead execution of the Application Security strategy and roadmap, driving secure SDLC transformation, strengthening application security testing, and reducing software supply chain exposure across global engineering groups.
This position also supports practical modernization in AppSec governance, including advancing generative AI and agentic technologies within Application Security oversight. You will help shape platform maturity, establish measurable risk outcomes, and build a strong global AppSec organization while coordinating with technology, product, and business leaders.
Responsibilities
- Lead enterprise Application Security strategy execution and roadmap delivery, driving secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams
- Own and oversee application security testing capabilities, including SAST, SCA, DAST, API security, threat modeling, and penetration testing, while setting enterprise standards and governance frameworks
- Drive strategic adoption and operational effectiveness of enterprise AppSec and ASPM platforms, providing executive-ready reporting on coverage, vulnerability trends, and remediation performance
- Lead software supply chain security initiatives, including dependency governance, artifact curation, provenance validation, and trusted build practices; manage incident response for zero-day exposures
- Build, mentor, and develop a high-performing global team; manage strategic vendor relationships and lead cross-functional transformation with technology, product, and business stakeholders
- Provide leadership for adopting generative AI and agentic technologies in Application Security, including governance for custom AI-enabled tools, agents, and automations with appropriate security and oversight
Requirements
- Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments, with a proven track record of driving transformation
- Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management
- Experience defining enterprise standards, operating models, remediation governance, exception processes, and measurable KPIs and KRIs
- Strong stakeholder management and executive communication skills, including translating technical risk into business impact and strategic decisions
- Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations
- Executive-level communication and presentation capabilities
- Strategic thinking that balances technical depth with business priorities
- Strong leadership and team development skills with a global mindset
- Proven ability to influence and drive change across complex organizational structures
Technologies
- SAST, SCA, DAST, API security, AppSec, ASPM
- CI/CD security, generative AI, agentic technologies
- Model Context Protocol (MCP), AI agents, retrieval-augmented generation
- AWS, Azure, GCP
Preferred Qualifications
- Demonstrated knowledge of generative AI, large language models, AI-assisted software development, and practical application of AI technologies to cybersecurity and DevSecOps use cases
- Strong understanding of MCP, AI agents, agentic architectures, tool calling, retrieval-augmented generation, AI security risks, and governance frameworks for AI integration
- Experience with multi-cloud security architectures and controls across AWS, Azure, and GCP with understanding of cloud-native delivery environments
- Proven track record in vendor management, contract negotiation, platform roadmap development, and strategic technology partnerships in enterprise security environments
Benefits
- Health & Wellness: Health care coverage designed for the mind and body
- Flexible Downtime: Generous time off to help keep you energized for your time on
- Continuous Learning: Access to resources to grow your career and learn valuable new skills
- Invest in Your Future: Competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
- Family Friendly Perks: perks for your partners and little ones
- Beyond the Basics: retail discounts and referral incentive awards
Salary: USD 130,000 - 160,000 per year. Final base salary will be based on geographic location and experience level, skill set, training, and certifications.
Recruitment Fraud Alert: If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to reportfraud@spglobal.com. S&P Global never requires candidates to pay money for job applications, interviews, offer letters, “pre-employment training,” or equipment/delivery of equipment.
Equal Opportunity Employer: S&P Global is an equal opportunity employer. Consideration is provided without regard to protected statuses. Only electronic job submissions will be considered. If you need an accommodation during the application process due to a disability, email EEO.Compliance@spglobal.com.
