# Security Engineering Lead

**Company**: S&P Global Market Intelligence
**Location**: Gdansk, POL
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Gdansk-POL/Lead-Security-Engineer_328289-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_6891d934-8a7

## Description

We are seeking a Security Engineering Lead to join our Risk & Valuations Services (RVS) team, which is part of S&P Global Market Intelligence. As a Security Engineering Lead, you will lead and oversee hands-on application and cloud penetration testing across assigned product portfolios, focusing on real-world exploitability and business risk while directing security engineering strategy for the region.

Responsibilities and Impact:

- Lead and oversee hands-on application and cloud penetration testing across assigned product portfolios

- Plan, conduct, and supervise red team activities in accordance with approved scope, authorization, and Rules of Engagement

- Drive adoption of AI-assisted testing techniques across security teams to improve coverage, efficiency, and testing quality

- Engage directly with senior product and engineering leadership to explain attack paths, prioritize findings, and facilitate timely, durable remediation

- Establish validation processes for remediation effectiveness, ensuring exploit paths are fully closed and do not regress

- Transform findings and remediation efforts into educational programs and strategic guidance to drive stronger proactive security posture

What We're Looking For:

- 5+ years of experience in penetration testing, red teaming, application security, or offensive security engineering with demonstrated leadership experience

- Strong expertise in web, API, and cloud-native security testing across multiple environments

- Experience testing modern architectures including microservices, CI/CD platforms, containerization technologies, and SaaS security frameworks

- Advanced scripting and development experience in programming languages such as Python, Go, JavaScript, or similar technologies

- Deep knowledge of security frameworks including OWASP Top 10, CWE/SANS Top 25, and secure development practices

- Exceptional written and verbal communication skills

Benefits:

- Health & Wellness: Health care coverage designed for the mind and body

- Flexible Downtime: Generous time off helps keep you energized for your time on

- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills

- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs

- Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too

## Skills

### Required
- penetration testing
- red teaming
- application security
- offensive security engineering
- AI-assisted testing
- cloud-native security testing
- microservices
- CI/CD platforms
- containerization technologies
- SaaS security frameworks
- Python
- Go
- JavaScript
- OWASP Top 10
- CWE/SANS Top 25

### Nice to have
- advanced offensive security certifications
- threat modeling
- secure architecture review
- building and scaling security programs

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Gdansk-POL/Lead-Security-Engineer_328289-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)