Description
S&P Global Inc. seeks a Lead, Information Security who will perform security analysis and communicate vulnerabilities identified in web applications with stakeholders, developers, and senior management.
The successful candidate will provide scoping data to assist in developing project proposals, create detailed assessment reports describing identified security weaknesses, potential business risks, and prioritize mitigation recommendations.
Key responsibilities include:
- Developing improved methodologies, processes, infrastructure, tools, and deliverables that contribute to the ongoing enhancement of vulnerability assessment capabilities
- Gathering requirements from Business Analysts and Application Owners
- Incorporating and defining security requirements, mapping security requirements, and defining data flow diagrams
- Delivering threat models in the design phase
- Providing strategic direction and tactical oversight for major security projects
- Performing application security assessments for native, web, and hybrid applications using open source and commercial tools
- Reporting key metrics to executive management and interacting with application owners and product engineering teams
The ideal candidate will have:
- Bachelor's degree in Computer Science, Computer Engineering, or related IT field
- 5 years of experience in the job offered or related occupation
- Experience with enterprise-grade Static Application Security Testing (SAST) tools, Dynamic Application Security Testing (DAST) tools, and Software Composition Analysis (SCA) tools
- Strong understanding of threat modeling, secure SDLC programs, and application security controls
In return for your expertise, we offer a competitive salary ranging from $172,827 to $206,350, plus a comprehensive benefits package, including health and wellness programs, flexible downtime, continuous learning opportunities, and family-friendly perks.