National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Sr. Application Security Engineer/Director - Generative AI (Remote)

AltFi Ltd
London
1 week ago
Create job alert

Sr. Application Security Engineer/Director - Generative AI (Remote)
About the Role:
The S&P Ratings Security team focuses on protecting our clients and users from all aspects of modern-day security threats. The mission of our team is to safeguard systems and data by developing innovative solutions for the biggest security challenges. We are looking for a Senior security engineer responsible for development and implementation of security architecture and engineering best practices across S&P Ratings technology platforms. This role will provide Security engineering and Security Architecture consultation to build and enhance security in S&P Ratings Applications and Services including GenAI applications.
Responsibilities and Impact:
This is a Director-level individual contributor role that will work across Security, software development, Data science/LLM, QA, and Operations teams to identify component and system level technical risks, identify and evaluate critical failure points, determine technical security controls to mitigate risks, prioritize and schedule controls with application development timelines, and work with cross functional teams to implement remediations. This role will drive the Secure SDLC roadmap, GenAI security strategy, and Cloud security architecture, assist with maturing the security engineering program, develop security tooling, mentor others and be hands-on partner to our development teams to deliver innovative and secure applications.
A successful candidate for this position will:
Develop, implement and maintain Application security and GenAI security strategy
Provide architectural guidance on best practices regarding security in software development, shared services, user interface design frameworks, high performance messaging solutions, server-side development, integrations, tools and technologies
Drive and guide the specification and realization of a security architecture, with decisions driven by balancing security risks faced by the business along with customer or market requirements
Perform threat modeling, secure code reviews, and secure design reviews for high-risk applications, evaluate new technology stacks and frameworks
Perform vulnerability research, serve as technical security/risk advisor for new technology/applications developed by S&P Ratings
Determine testing requirements and develop strategies to automate security testing using a variety of scripting and open source tools
Assist developers in remediating vulnerability findings by providing line-by-line guidance
Coach development teams on security disciplines like Threat modeling, Security code reviews, provide training and education to developers on software security best practices
Maintain knowledge of current and emerging technologies/products/trends related to security architectural solutions
Develop repeatable application security patterns to ensure that systems are placed within the relevant security zones based on the data they house and their purpose
Consult and assist with security incident response process
Consult on efforts to work with internal and external teams to effectively scope and drive Application Penetration tests that help identify and mitigate gaps in security controls
Guide development and SRE teams in building secure Cloud Native applications by incorporating Cloud and Microservices Security best practices and industry standards
Basic Qualifications:
Bachelor’s degree in Computer Science, related field or relevant work experience
12 or more years of progressive related experience in Security engineering roles
Demonstrated subject matter expertise in Application Security, Web services security, GenAI/LLM security
Programming expertise – Java, Python, Agile SDLC processes
Experience with threat modeling, design reviews, risk analysis and control design
Experience architecting and leading security for Cloud native applications
In depth knowledge of network security, authentication and authorization
Advanced understanding of vulnerability exploitation chaining, and vulnerability remediation
Demonstrated expertise in product/application security architecture – Service oriented architecture (SOA), Network security, application security, web services, Angular, JavaScript
Security audit, Vulnerability assessment and packet analysis skills
TCP/IP stack knowledge, Encryption expertise, TLS, DTLS, ECC, PKI/Certificates
Identity & Access Management: AD/LDAP
Preferred Qualifications:
Experience with AI technologies and services (e.g., OpenAI, Bedrock, etc.)
Expertise in the security of Gen AI models, including multi-modal models
Experience with the security of automation built around Gen AI inputs and outputs
Knowledge with AWS cloud architecture and virtualization technologies such as Containers, EKS, Kubernetes, and VMware
Experience in defining and documenting security reference architectures and standards
Experience with automation tools associated with DevOps and CI/CD pipelines, and with security integration into CI/CD
Familiarity with SAST/DAST/SCA tools like Fortify, Whitesource
Database, datalake knowledge – Postgres, Oracle, Databricks, Snowflake
Familiarity with Secure SDLC frameworks such as NIST SSDF, OpenSAMM, BSIMM
Security Forensic analysis skills
Equal Opportunity Employer:
S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.

#J-18808-Ljbffr

Related Jobs

View all jobs

Sr. Enterprise Security Engineer Remote - United Kingdom

AWS Sr Application Security Engineer, AppSec -EC2

AWS Sr Application Security Engineer, AppSec -EC2

AWS Sr Application Security Engineer, AppSec -EC2

Sr. Security Engineer, AppSec - Amazon Stores Security

Sr. Security Engineer, AppSec - Amazon Stores Security

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Present Cyber Security Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

Cyber security is no longer just an IT issue—it’s a board-level priority. Whether you’re applying for a role in penetration testing, security operations, risk management, or compliance, your ability to clearly explain cyber threats and solutions to non-technical stakeholders is vital. This guide will help cyber security job seekers develop one of the most in-demand soft skills in the industry: public speaking. You’ll learn how to simplify complex concepts, structure effective presentations, use storytelling and analogies, and handle common stakeholder questions with confidence.

Cyber Security Jobs Employer Hotlist 2025: 50 UK Companies Actively Hiring Right Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their cyber security teams. Ransomware payouts broke records in 2024, the UK’s new Cyber Security Bill imposed mandatory breach disclosure, and the National Cyber Force’s move to Samlesbury has super‑charged the northern skills market. Result? Demand for security architects, SOC analysts, penetration testers, cloud‑security engineers, threat hunters & GRC specialists is at an all‑time high in 2025. Below you’ll find 50 organisations that have posted UK‑based cyber security vacancies or announced head‑count growth during the past eight weeks. They’re organised into five quick‑scan categories. For every employer you’ll see: Main UK hub Example live or recent vacancy Why it’s worth a look (tech stack, culture, mission) Search any company on CyberSecurityJobs.tech to view current ads, or set a free alert so fresh openings land straight in your inbox.

Return-to-Work Pathways: Relaunch Your Cyber Security Career with Returnships, Flexible & Hybrid Roles

Re-entering the workforce after a career break can feel especially challenging in a fast-moving field like cyber security. Whether you stepped away for parenting, caregiving or another life chapter, the UK’s cyber security sector now offers a range of return-to-work pathways—from structured returnships to flexible and hybrid roles. These programmes value the transferable skills and resilience you’ve developed during your break, pairing you with mentorship, upskilling opportunities and supportive networks to ease your transition back into cyber security. In this article, tailored for parents and carers, you’ll discover how to: Understand the growing demand for cyber security talent in the UK Translate your organisational, communication and problem-solving skills into cyber security roles Tackle common re-entry challenges with practical solutions Refresh your technical knowledge through targeted learning Access returnship and re-entry programmes specific to cyber security Find roles that accommodate family commitments—whether hybrid, flexible or full-time Balance your career relaunch with caring responsibilities Master applications, interviews and networking in cyber security Draw inspiration from real returner success stories Whether you aim to return as an analyst, penetration tester, security engineer or compliance specialist, this guide will equip you with the steps and resources to reignite your cyber security career.