Senior Cloud Security Engineer

The Application Security organization is responsible for the solutions and processes that secure Vanguard applications and operations. The security orchestration team integrates security tooling into the CI/CD pipeline ensuring security coverage and controls across all security tools. As a Cloud Security Engineer, you will develop technical solutions that ensure the security and compliance of the Vanguard software development lifecycle (SDLC). The team is collaborative, and team members are expected to contribute to all aspects that the team needs.

You will be expected to participate in technical implementation as well as security assurance.

This Hybrid role (in office Tue-Wed-Thu) is based in either Charlotte, NC, Dallas, TX, or Malvern, PA

• Participates in designing, testing, coding, and reviewing software throughout product life cycle.
• Identifies opportunities for continuous quality improvement of technical standards, methodologies, and technologies.
• Builds proactive monitoring and alerting into the Application Security tools and processes to minimize the downtime to the developer community.
• Participates in on-call rotation. Resolves technical problems discovered by internal clients. Researches issues and performs root cause analysis. Anticipates technology problems and prevents them.
• Works closely with other Application Security teams and CTO to integrate existing and new security tools into CI/CD pipelines.
• Works closely with other Application Security teams and leadership to bring application security scanning close to developers to enhance developer experience and increase productivity.
• Identify opportunities to automate the Application Security processes and guide the team to improve efficiency and scalability.
• Maintains a current and working knowledge of IT development methodology, architecture design, and technical standards. As new standards are instituted, ensures their usage by team members.
• Mentors junior team members and identifies training needs.
• Writes documentation, including technical and client documentation.
• Participates in special projects and performs other duties as assigned.

• Undergraduate degree in a related field or equivalent combination of training and experience.
• Strong experience with any modern programming language.
• Strong knowledge of application development, build, and deployment processes.
• Experience in one or more cloud providers and serverless platforms (preferably AWS).
• Experience with well-known application security tools (SAST, SCA, IAST, RASP, etc).
• Relevant certifications in application development, security, Dev Sec Ops , or cloud are a plus.