# Senior DevSecOps Engineer – Enterprise Developer Platform and Toolchain

**Company**: S&P Global
**Location**: Hyderabad
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/Sr-DevSecOps-Engineer_332474?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9ae4d2b2-974

## Description

## About the Role:

You will be a Senior DevSecOps Engineer on the Enterprise Developer Platform & Toolchain team at S&P Global. This team supports software engineers across the organization, focusing on DevOps, DevSecOps, FinOps, Platform Engineering, Site Reliability Engineering (SRE), and Developer Experience (DevEx).

## Responsibilities:

- Define and implement baseline security policies and automated guardrails across source control and CI/CD environments.

- Integrate, manage, and tune code quality and application security tools within developer workflows.

- Triage security findings, prioritize vulnerabilities by risk, and track remediation against service-level agreements (SLAs).

- Establish governance for credentials, secrets, and non-human identities across the developer toolchain.

- Harden build infrastructure and software supply chain controls.

- Provision, secure, and optimize AWS services supporting the developer platform.

- Contribute to governance for AI-assisted development tools and developer endpoint security.

## What We're Looking For:

- 5–8 years of experience in DevSecOps, application security, or security governance.

- Strong experience designing and automating enterprise-scale CI/CD pipelines.

- Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, and related tools.

- Strong understanding of repository lifecycle management and Git practices.

- Experience with static application security testing (SAST), software composition analysis (SCA), secrets scanning, or cloud security tools.

- Ability to write clear security policies and standards.

- Knowledge of identity and access management, including single sign-on (SSO) and role-based access control (RBAC).

- Proficiency with infrastructure as code, including Terraform, CloudFormation, or CDK.

- Experience with AWS compute, networking, storage, IAM, and container orchestration.

- Strong scripting and automation skills in Python or Bash.

## Benefits:

- Health & Wellness: Health care coverage designed for the mind and body.

- Flexible Downtime: Generous time off helps keep you energized for your time on.

- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

- Invest in Your Future: Competitive pay, retirement planning, and financial wellness programs.

- Family Friendly Perks: Perks for your partners and little ones, too.

## Skills

### Required
- DevSecOps
- application security
- security governance
- CI/CD pipelines
- GitHub Enterprise Cloud
- GitHub Actions
- static application security testing (SAST)
- software composition analysis (SCA)
- secrets scanning
- cloud security tools
- Terraform
- CloudFormation
- CDK
- AWS compute
- networking
- storage
- IAM
- container orchestration
- Python
- Bash

### Nice to have
- AI-assisted development tools
- developer endpoint security
- compliance as code
- policy engines
- AWS certifications
- Kubernetes certifications
- security certifications

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Hyderabad-Telangana/Sr-DevSecOps-Engineer_332474?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)