Description
About the Role:
You will be a Senior DevSecOps Engineer on the Enterprise Developer Platform & Toolchain team at S&P Global. This team supports software engineers across the organization, focusing on DevOps, DevSecOps, FinOps, Platform Engineering, Site Reliability Engineering (SRE), and Developer Experience (DevEx).
Responsibilities:
- Define and implement baseline security policies and automated guardrails across source control and CI/CD environments.
- Integrate, manage, and tune code quality and application security tools within developer workflows.
- Triage security findings, prioritize vulnerabilities by risk, and track remediation against service-level agreements (SLAs).
- Establish governance for credentials, secrets, and non-human identities across the developer toolchain.
- Harden build infrastructure and software supply chain controls.
- Provision, secure, and optimize AWS services supporting the developer platform.
- Contribute to governance for AI-assisted development tools and developer endpoint security.
What We're Looking For:
- 5–8 years of experience in DevSecOps, application security, or security governance.
- Strong experience designing and automating enterprise-scale CI/CD pipelines.
- Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, and related tools.
- Strong understanding of repository lifecycle management and Git practices.
- Experience with static application security testing (SAST), software composition analysis (SCA), secrets scanning, or cloud security tools.
- Ability to write clear security policies and standards.
- Knowledge of identity and access management, including single sign-on (SSO) and role-based access control (RBAC).
- Proficiency with infrastructure as code, including Terraform, CloudFormation, or CDK.
- Experience with AWS compute, networking, storage, IAM, and container orchestration.
- Strong scripting and automation skills in Python or Bash.
Benefits:
- Health & Wellness: Health care coverage designed for the mind and body.
- Flexible Downtime: Generous time off helps keep you energized for your time on.
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
- Invest in Your Future: Competitive pay, retirement planning, and financial wellness programs.
- Family Friendly Perks: Perks for your partners and little ones, too.