S&P Global—AD, Cloud Security Architect

Job description

Description: About the Role: Grade Level (for internal use): 12The Team Join our innovative and collaborative team at S&P Global's IT - Enterprise Technology department. We pride ourselves on fostering a culture that values excellence, teamwork, and continuous learning. Our team is dedicated to pushing the boundaries of AI technology and delivering impactful solutions that drive business success. Job Description We are seeking an experienced Lead II, Software Engineer to join our team as an individual contributor with deep technical expertise. This role will lead software-related projects, including GenAI initiatives, develop solutions to complex business challenges, and provide technical direction while working closely with cross-functional teams to deliver high-impact engineering solutions. This is a security-remediation-heavy role: the successful candidate will spend significant time driving down vulnerability, dependency, and secret-exposure findings across our systems and holding our codebase to Concord security standards. Security Focus Security remediation is a primary, day-to-day part of this role. The Lead II will be expected to spend significant time driving down findings across Wiz, SVA/DVA scans, Dependabot, GitHub Advanced Security (GHAS), and CodeQL, and remediating exposed secrets, all in accordance with Concord security standards. Candidates should be comfortable treating security work with the same rigor and priority as feature development. Responsibilities and Impact - Lead software-related projects, including GenAI initiatives, from design through delivery, ensuring alignment with customer needs and capabilities. - Own security remediation as a core, ongoing responsibility: continuously triage, prioritize, and drive vulnerabilities to closure across Wiz, static application security testing (SVA), dynamic application security testing (DVA), Dependabot, GitHub Advanced Security (GHAS), and CodeQL, ensuring findings are remediated within SLA and root causes are addressed, not just symptoms. - Lead secret detection and remediation efforts, including identifying exposed credentials and secrets, rotating and revoking compromised material, and hardening pipelines to prevent recurrence, in strict alignment with Concord security standards. - Develop solutions for complex internal and/or external business challenges; recommend improvements to products, processes, or services. - Develop and monitor complex project plans and budgets. - Provide guidance on routine to highly complex technical problems with broad impact across the business area. - Exercise sound judgment within defined procedures and policies to determine appropriate courses of action. - Analyze situations or data requiring review of multiple relevant factors to inform technical decisions. - Lead the creation and maintenance of hardware and/or software systems, applying mastery of one or more programming languages. - Act as a technical lead when collaborating with other teams; frequently interact with subordinate supervisors and functional peer groups. - Communicate complex technical concepts clearly, anticipate objections, and influence senior leaders to consider alternative approaches. - Proactively invest time in building and living team culture, and support the cultural awareness and growth of others. - Document processes, code changes, and project updates to facilitate knowledge sharing and transparency. - Track and report on security remediation metrics (open findings, aging, SLA compliance) to engineering and security leadership, and champion secure-by-design practices so new code minimizes future Wiz/SVA/DVA/GHAS/CodeQL findings. What We're Looking For Basic Required Qualifications: - Bachelor's, Master's, or similar advanced degree in Computer Science, Engineering, or a related field, or equivalent work experience. - 10 years of related software engineering experience. - Mastery of one or more high-level programming languages, along with relevant technologies, development tools, and effective design techniques. - Working knowledge of the GenAI or agentic technology stack (e.g., LLMs, prompt engineering, agent frameworks, and related tooling). - Knowledge of containerization technologies like Docker. - Understanding of CI/CD pipelines and DevOps practices. - Substantial, hands-on experience with security remediation as a core part of the role — not a one-off task — including vulnerability scanning and management (Wiz, static/dynamic vulnerability assessments — SVA/DVA), dependency and code scanning (Dependabot, GitHub Advanced Security/GHAS, CodeQL), and secret detection and remediation; strong working knowledge of Concord security standards. - Proven ability to consistently drive high volumes of security findings to closure on schedule, prioritize remediation work alongside feature delivery, and hold self and team accountable to security SLAs. - Demonstrated experience leading software projects and guiding teams through complex technical problems. - Strong ability to manage ambiguity, facilitate impactful check-in discussions, and navigate difficult conversations effectively. - Excellent communication skills, with the ability to influence stakeholders and senior leaders. Additional Preferred Qualifications: - Prior Team Lead experience. - Hands-on experience with GenAI projects, including agent-based architectures or frameworks (e.g., Langchain, LlamaIndex). - Experience mentoring and developing the technical and professional growth of team members. - Familiarity with modern software development practices and tools relevant to the team's technology stack. - Prior experience owning a security remediation backlog end-to-end (e.g., as an application security champion, security-focused tech lead, or similar), including direct experience with Wiz, GHAS, CodeQL, or equivalent tools, and driving cross-team remediation efforts against Concord or comparable internal security standards. Benefits - Opportunity to lead high-impact software engineering projects, including cutting-edge GenAI initiatives. - Work in a collaborative and innovative environment. - Opportunity to mentor and influence technical direction at scale. - Access to professional development opportunities. About S&P Global Market Intelligence At S&P Global Market Intelligence, a division of S&P Global we understand the importance of accurate, deep and insightful information. Our team of experts delivers unrivaled insights and leading data and technology solutions, partnering with customers to expand their perspective, operate with confidence, and make decisions with conviction. For more information, visit www.spglobal.com/marketintelligence. What’s In It For You? Our Mission: Advancing Essential Intelligence. Our People: We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference. Our Values: Integrity, Discovery, Partnership Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals. Benefits: We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global. Our benefits include: - Health & Wellness: Health care coverage designed for the mind and body. - Flexible Downtime: Generous time off helps keep you energized for your time on. - Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills. - Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs. - Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families. - Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference. For more information on benefits by country visit: https://spgbenefits.com/benefit-summaries Global Hiring and Opportunity at S&P Global: At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets. Recruitment Fraud Alert: If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to reportfraud@spglobal.com. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here. ----------------------------------------------------------- Equal Opportunity Employer S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.  US Candidates Only: Know Your Rights: Workplace discrimination is illegal ----------------------------------------------------------- 20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.2 - Middle Professional Tier II (EEO Job Group), SWP Priority – Ratings - (Strategic Workforce Planning)