1 day ago
Charlotte, NC, USASenior
Responsibilities
- Guide Application Security strategy and secure the software development lifecycle.
- Drive API, container, and application security testing initiatives, including DAST and related security validation capabilities.
- Develop security strategies for containers, serverless, APIs, and AI/ML technologies.
- Provide hands-on engineering support for security incidents, threat events, vulnerability management, and control improvements.
- Gather and report metrics on security coverage, risk reduction, and program maturity.
- Create and maintain Application Security standards, procedures, and documentation.
- Provide technical mentorship and training to development and cloud engineering teams.
- Implement, optimize, and operationalize Application Security solutions and automation.
- Monitor emerging application security trends, attack techniques, technologies, and best practices.
Requirements
- Undergraduate degree in a related field or an equivalent combination of training and experience.
- Strong experience deploying and operating DAST tools, including team onboarding, authentication setup, and CI/CD integration.
- Experience with application security tools including SAST, SCA, IAST, and RASP.
- Strong knowledge of application development, build, and deployment processes, including development environments, IDEs, repositories, branching, pipelines, cloud, containers, and serverless technologies.
- Familiarity with NIST, OWASP, and MITRE standards and frameworks.
- Relevant certifications in application development, security, application security, DevSecOps, or cloud are preferred.
Benefits
- Hybrid working model for the majority of crew members, supporting flexibility and in-person learning, collaboration, and connection.
Categories
About Vanguard
Vanguard is an investment management company offering low-cost index and active mutual funds, ETFs, brokerage, retirement plans, and financial advice for individual, institutional, and advisor clients. Founded in 1975 by John C. Bogle and headquartered in Valley Forge, PA, it operates a client-owned structure in which its funds own the firm. Its business model centers on asset-based management and advisory fees.