1 day ago
Charlotte, NC, USA or Dallas, TX, USAMid Level
Responsibilities
- Perform manual and AI-assisted secure code reviews across modern application stacks.
- Use established prompts, workflows, and review methodologies for AI-assisted code review.
- Review and validate vulnerability findings from automated and AI-assisted analysis.
- Produce technical reports and risk-based recommendations.
- Communicate security findings and remediation guidance to development and technical teams.
- Collaborate with penetration testers, threat modelers, and application security teams.
- Support team processes, methodologies, and automation initiatives.
Requirements
- At least 3 years of related experience in application security, secure code review, or software engineering with a security focus.
- Understanding of secure coding principles, OWASP Top 10, common application vulnerabilities, and secure software development practices.
- Familiarity with modern software architectures, APIs, cloud-native applications, CI/CD pipelines, secure SDLC, and DevSecOps practices.
- Familiarity with Java, C#, Python, JavaScript/TypeScript, Go, or similar languages.
- Familiarity with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube.
- Familiarity with generative AI or AI-assisted developer and security tools.
- Ability to communicate security findings and remediation guidance to developers and technical teams.
- Undergraduate degree in a related field or equivalent combination of training and experience.
- Preferred: experience creating prompts, workflows, agents, or automations.
- Preferred: familiarity with LLM security risks, prompt injection, insecure code generation, model misuse, and AI application attack vectors.
- Preferred: familiarity with applications using machine learning, generative AI, agentic AI, or AI-enabled business processes.
Benefits
- Hybrid working model designed to provide flexibility alongside in-person learning, collaboration, and connection.
Tech Stack
Categories
About Vanguard
Vanguard is an investment management company offering low-cost index and active mutual funds, ETFs, brokerage, retirement plans, and financial advice for individual, institutional, and advisor clients. Founded in 1975 by John C. Bogle and headquartered in Valley Forge, PA, it operates a client-owned structure in which its funds own the firm. Its business model centers on asset-based management and advisory fees.