Sr DevSecOps Engineer

Standard & Poors South Asia Services·Hyderabad

Pay not stated5–8 yrsFull-time

Apply on Standard & Poors South Asia Services' site Track your applications and see your fit: start free

Read from the company's own careers page; you apply on their site.

How well do you fit this job?

Upload your resume to see each requirement checked against your profile, in under a minute.

Check my fit

Hard to read?

About the role

Senior DevSecOps Engineer – Enterprise Developer Platform and Toolchain The Enterprise Developer Platform & Toolchain team owns the platforms, tools and capabilities that support software engineers across S&P Global. As a globally distributed team, we build services, policies and automated controls that secure the developer toolchain while keeping platforms simple, consistent and engineer friendly.

What you'll do

Define and implement baseline security policies and automated guardrails across source control and CI/CD environments
Integrate, manage and tune code quality and application security tools, including SonarQube, GitHub Advanced Security (GHAS), Checkmarx and Wiz
Triage security findings, prioritise vulnerabilities by risk and track remediation against service-level agreements (SLAs)
Establish governance for credentials, secrets and non-human identities across the developer toolchain
Harden build infrastructure and software supply chain controls, including artifact management with JFrog Artifactory/Xray