Associate Software Development Engineer

About the Role

S&P Global is hiring Associate Software Development Engineers for its offices located in Chennai, Hyderabad, and New York. The company is committed to advancing essential intelligence by providing critical data and insights that help governments, businesses, and individuals make confident decisions. With a global workforce exceeding 35,000, S&P Global empowers meaningful impact across industries, including energy transitions and global market workflows. The organization values integrity, discovery, and partnership and is an Equal Opportunity Employer.

Key Responsibilities

• Collaborate with senior engineers to conduct secure design and code reviews, emphasizing security audits on AI agents, large language model (LLM) pipelines, and cognitive workflow systems.
• Identify and assess vulnerabilities unique to AI systems, such as prompt injection attacks, data poisoning risks, and insecure handling of AI outputs.
• Create, maintain, and automate strong security tests integrated into CI/CD pipelines, utilizing Python and open-source tools.
• Conduct research to analyze, prioritize, and resolve security vulnerabilities detected through automated scans and manual evaluations.
• Offer practical security recommendations for server-side application development, user interface frameworks, and cloud integration points.
• Stay continuously updated regarding newly discovered zero-day vulnerabilities and emerging security frameworks specialized for protecting AI architectures, including standards like OWASP Top 10 for LLMs.

Qualifications and Requirements

• A Bachelor’s degree in Computer Science, Information Security, or a closely related technical discipline is required.
• At least one year of professional experience in Information Security, Application Security, or security-intensive software development roles.
• Strong proficiency in Python scripting for security automation; familiarity with Java or JavaScript/Angular is advantageous.
• Solid understanding of application security principles, including web services, microservices or service-oriented architectures, and the OWASP Top 10 vulnerabilities.
• Basic knowledge of artificial intelligence concepts, large language model architectures, secure API usage, and data privacy concerns within AI workflows.
• Comprehensive grasp of networking protocols (TCP/IP), transport layer security mechanisms (TLS/DTLS), public key infrastructure (PKI), certificate lifecycle management, and foundational cryptography.