S&P Global Inc.Hiring

Lead, Information Security

  • New York, NY
  • Lead
  • Posted 5 days ago
In one line

Application security lead assessing web, native and hybrid apps, running threat models and guiding pentests and secure SDLC work. Remote within the US.

About the role

Fits a security engineer who likes both hands-on testing and program building, and who can explain risk clearly to developers and executives. The role spans many product teams and varied technology stacks.

At a glance

Pay
Not stated in the posting
Location
New York, NY
Seniority
Lead
Skills
Fortify, Burp Suite Pro, OWASP ZAP, Mend, STRIDE, Java, Python, GitLab CI
Posted
30 Oct 2026
Last checked
3 Nov 2026

What you will do

  • Assess applications for vulnerabilities and explain findings to developers and managers
  • Write assessment reports covering weaknesses, business risk and prioritized fixes
  • Define security requirements and deliver threat models during design
  • Oversee major security projects such as pentests, patching and change control
  • Report application and infrastructure health metrics to executive management

What they look for

  • Degree in computer science, computer engineering or a related IT field
  • Five years of experience in application security or a closely related role
  • Hands-on work with SAST tools such as Fortify and DAST tools such as Burp Suite Pro and OWASP ZAP
  • Experience with threat modeling frameworks such as STRIDE, PASTA or MITRE
  • Knowledge of secure SDLC, CI/CD tooling and regulations such as DORA, NIST 800-53 and SOC 2

Nice to have

  • Experience securing apps in AWS and Azure multi-cloud environments

How Keywordise applies for you

  1. 1Upload your CVAdd your CV once. It takes about a minute.
  2. 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
  3. 3The form fills itselfName, email, experience and screening questions, field by field.
  4. 4Application sentYou get a receipt and follow it in your dashboard.

Apply with Keywordise AI7-day free trial, no card.

Apply from your AI assistant

Connect Keywordise to your assistant once, then send it the prompt. It applies for you.

Claude

  1. In Claude, open Settings, then Connectors, and choose Add custom connector.
  2. Name it Keywordise and paste the connector URL.
  3. Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
Connector URL
https://keywordise.com/mcp

Disconnect any time in your Keywordise settings.

ChatGPT

  1. In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
  2. Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
  3. Log in to Keywordise and approve. Then send the prompt in a new chat.
Connector URL
https://keywordise.com/mcp

Disconnect any time in your Keywordise settings.

Muse

  1. Open Muse (muse.ai or the app) and send it the message below.
  2. If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
  3. Send the prompt. Muse asks before it sends anything.
Message for Muse
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.

Muse is available in the US only for now.

Prompt
Apply to Keywordise job u327fz7oog
How to connect

Questions about this job

Where is this job based?

The posting lists Lead, Information Security as a role based in New York, NY, United States.

What does this job pay?

No pay range is stated in the posting.

What experience is needed?

It is a lead role. The posting asks for: degree in computer science, computer engineering or a related IT field; five years of experience in application security or a closely related role; hands-on work with SAST tools such as Fortify and DAST tools such as Burp Suite Pro and OWASP ZAP. Skills it names include Fortify, Burp Suite Pro, OWASP ZAP, Mend.

How do I apply with Keywordise AI?

Click Apply with Keywordise AI, create an account and upload your CV. Your CV and cover letter are written for this job from what you have really done, then Keywordise applies for you. Trial: 7 days, no card.

More IT and software jobs in New York, NY

All IT and software jobs in New York, NY
S&P Global Inc.New York, NY
Apply with Keywordise AI