Devsecops Architect – Artifact Management & Software Supply Chain Security

S&P Global

Base: $125,000 to $165,000; bonus/equity: annual i...
Hybrid
Jfrog artifactory deployment and architecture
Ci/cd pipeline integration github jenkins azure devops
Artifact immutability provenance versioning enforcement
The role focuses on securing enterprise artifact and dependency management platforms to ensure trusted build artifacts across CI/CD pipelines

Job Summary

  • The role focuses on securing enterprise artifact and dependency management platforms to ensure trusted build artifacts across CI/CD pipelines.
  • Candidates must implement safeguards against AI-specific threats including prompt injection, model poisoning, and data leakage within development workflows.
  • S&P Global offers competitive pay, generous time off, continuous learning resources, and comprehensive health and family benefits.

Matching Summary

The role focuses on securing enterprise artifact and dependency management platforms to ensure trusted build artifacts across CI/CD pipelines.

Salary

Base: $125,000 to $165,000; Bonus/Equity: Annual incentive plan eligible; Benefits: Health care, flexible downtime, retirement planning, education programs

Skills & Requirements

Must-have

  • JFrog Artifactory deployment and architecture
  • CI/CD pipeline integration GitHub Jenkins Azure DevOps
  • Artifact immutability provenance versioning enforcement
  • AI security prompt injection model poisoning defense
  • Dependency waiver and approval workflow implementation

Nice-to-have

  • Azure cloud environment experience preferred
  • Python Groovy Terraform automation scripting skills
  • Responsible AI governance framework knowledge
  • Experience securing LLMs and GenAI workloads
  • Strong application security principles background

Key Requirements

  • Bachelor's degree in Computer Science Engineering Cybersecurity or equivalent
  • 3-6 years of experience in DevSecOps or software supply chain security
  • Hands-on experience with JFrog Artifactory and package curation models
  • Foundational understanding of AI/ML concepts and security risks
  • Proficiency in Python Groovy Terraform for automation and policy-as-code

Work Rights

Not specified

Tailored Resume

Cover Letter