Security Test Engineer

 

About the Role: 


Grade Level (for internal use):
10
 

The Team 
 Security Testing Team in the Quality Engineering space plays a crucial role in safeguarding business operations by identifying vulnerabilities and ensuring robust protection against cyber threats. Through meticulous testing practices, we enhance the security posture of applications, thereby reducing the risk of data breaches and financial loss. By integrating security measures early in the development lifecycle, the team helps streamline processes, minimize disruptions, and ultimately contribute to greater business efficiency and resilience. 
  
 

S&P Global Ratings is the worlds leading provider of independent credit ratings. Our ratings are essential to driving growth, providing transparency, and helping educate market participants so they can make decisions with confidence. We have more than one million credit ratings outstanding on government, corporate, financial sector and structured finance entities and securities. We offer an independent view of the market built on a unique combination of broad perspective and local insight. We provide our opinions and research about relative credit risk; market participants gain independent information to help support the growth of transparent, liquid debt markets worldwide. 
  
 

What is in it for you 

 Serve as a highly technical security expert to bring security transformation to both new and legacy applications in quality engineering space. 

 Using a wide range of cutting-edge technology to innovate while testing. 

 An ever-challenging environment to hone your existing skills in Security Testing, Automation, Python Programming, Bash scripting etc. 

 Being a part of an organization which values Culture of Urgency and Shift Left approaches. 

 Gain the opportunity to apply your strategic thinking alongside technical skills to safeguard our systems defending against emerging cyber threats. 

 A plenty of skill building, knowledge sharing, and innovation opportunities. 

 Building a fulfilling career with a global financial technology company. 

  
 

Responsibilities 

 This role will involve designing and executing security tests, identify vulnerabilities, and drive remediation strategies while collaborating with cross-functional teams in an Agile environment. 

 Understand the applications security requirements and identify & document the scope of the test. 

 Develop and maintain security testing automation using tools like Burp Suite, ZAP, or similar tools. Integrate security testing into CI/CD pipelines. 

 Automate processes and workflows using Python to minimize manual work. 

 Collaborate with development, QE, and DevOps teams to investigate security incidents, perform root cause analysis, and validate security fixes. 

 Oversee results and logs to analyze, prioritize, and initiate remediation for findings identified by security tools during SAST, DAST, SCA, artifact scanning, container scanning, etc... 

 Prepare detailed reports summarizing test results, logs, findings, and recommendations for strengthening overall security of an application. 

 Create and track security metrics, KPIs, and KRIs to measure operational effectiveness. 

 Prepare comprehensive reports for senior management on security performance and strategic initiatives. 

 Work independently, providing recommendations, and leading the accomplishments of the tasks from inception to completion. 

 Demonstrate outstanding flexibility and leadership with proper communication of security testing result interpretation and explanation to audience. 

 Participate in Daily Stand-up Calls, works closely with the Agile Manager to know the deliverables and commitments of each release. 

 Actively taking part in resolving critical security issues and coming up with solutions to mitigate the same. 

  
 

Basic Qualifications 

 Bachelor's or masters degree in Electronics and Communication, Computer Science, Cybersecurity, or related fields. 

 

6 to 9 years of IT experience with relevant professional experience of

Minimum 4 years in the field of Cyber Security Testing. 

 Should have strong hands-on experience in security testing, penetration testing, and vulnerability assessment. 

 Strong experience in web, API, and cloud security testing. 

 Clear understanding of security vulnerabilities, exploits, and mitigation techniques 

 Strong grasp of the OWASP Top 10 vulnerabilities and effective mitigation strategies. 

 Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Wireshark, Nessus, OpenSSL and Crypto validation tools. 

 Proficiency in SAST/DAST tools and security frameworks like OWASP Top 10, CIS Benchmarks, and CVSS. 

 Hands-on experience with Selenium, Pytest, and RestAssured API Testing using Python. 

 Strong hands-on experience with scripting and programming languages including Python, PowerShell, Bash for security tasks. 

 Familiarity with RESTful APIs, webhooks, and integration of third-party security tools and services via automation. 

 Knowledge of DevSecOps practices and integrating security in CI/CD pipelines. 

 Self-motivated and driven to stay updated with the latest security trends, technologies, and best practices, maintain high level of accuracy in security assessments. 

 Ability to analyze and communicate complex cybersecurity and technical challenges to technical and non-technical users, leaders, and stakeholders. 

 Experience collaborating with cross functional global and remote teams with diverse backgrounds. 

 Should be able to work under a competitive time frame and deliver. 

 Should be a very fast learner and have the excellent problem-solving ability. 

 Should have excellent written and verbal communication skills. 

  
 

Nice to have


Skills:

 

 Security Certifications like CISSP, CEH, CISM, OSCP or CompTIA Security+ shall be having the preference. 

 Hands-On experience in building AI-powered security tools, chatbots, and agent-driven automation pipelines. 

 Knowledge on Agentic AI frameworks, LLMs, and orchestration libraries like LangChain, crewAI or RAG-based architectures. 

  
 

Grade10  
 

LocationHyderabad  
 

Shift time11am to 8pm / 12pm to 9pm IST  
 

Hybrid Modeltwice a week work from office 


About S&P Global RatingsAt S&P Global Ratings, our analyst-driven credit ratings, research, and sustainable finance opinions provide critical insights that are essential to translating complexity into clarity so market participants can uncover opportunities and make decisions with conviction. By bringing transparency to the market through high-quality independent opinions on creditworthiness, we enable growth across a wide variety of organizations, including businesses, governments, and institutions.

S&P Global Ratings is a division of S&P Global (NYSESPGI). S&P Global is the worlds foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets. With every one of our offerings, we help many of the worlds leading organizations navigate the economic landscape so they can plan for tomorrow, today.For more information, visit www.spglobal.com/ratings



Whats In It For

You



Our Purpose:

Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technologythe right combination can unlock possibility and change the world.Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence, pinpointing risks and opening possibilities. We Accelerate Progress.



Our People:





Our Values:



Integrity, Discovery, Partnership

At S&P Global, we focus on Powering Global Markets. Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of

integrity in all we do, bring a spirit of

discovery to our work, and collaborate in close

partnership with each other and our customers to achieve shared goals.

Benefits:

We take care of you, so you cantake care of business. We care about our people. Thats why we provide everything youand your careerneed to thrive at S&P Global.

Health & WellnessHealth care coverage designed for the mind and body.

Continuous LearningAccess a wealth of resources to grow your career and learn valuable new skills.

Invest in Your FutureSecure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

Family Friendly PerksIts not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

Beyond the BasicsFrom retail discounts to referral incentive awardssmall perks can make a big difference.

For more information on benefits by country visithttps://spgbenefits.com/benefit-summaries



Global Hiring and Opportunity at S&P Global:

At S&P Global, we are committed to fostering a connected andengaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.



S&P Global has a Securities Disclosure and Trading Policy (the Policy) that seeks to mitigate conflicts of interest by monitoring and placing restrictions on personal securities holding and trading. The Policy is designed to promote compliance with global regulations. In some Divisions, pursuant to the Policys requirements, candidates at S&P Global may be asked to disclose securities holdings. Some roles may include a trading prohibition and remediation of positions when there is an effective or potential conflict of interest. Employment at S&P Global is contingent upon compliance with the Policy.




----



Equal Opportunity Employer

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.





If you need an accommodation during the application process due to a disability, please send an email to EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.

US Candidates Only The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. Pay Transparency Nondiscrimination Provision - https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf


----