1 day ago
Charlotte, NC, USA or Dallas, TX, USASenior
Responsibilities
- Perform manual and AI-assisted secure code reviews across modern application stacks.
- Develop prompts, workflows, and methodologies to improve AI-assisted code review effectiveness and repeatability.
- Validate and refine vulnerability findings, reduce false positives, and identify overlooked risks.
- Produce technical reports and risk-based recommendations.
- Explain security findings to development teams and provide actionable remediation guidance.
- Collaborate with penetration testers, threat modelers, and application security teams.
- Contribute to team processes, methodologies, and automation initiatives.
Requirements
- Require a minimum of 5 years of related experience in application security, secure code review, or software engineering with a security focus.
- Require strong knowledge of secure coding principles, OWASP Top 10, common application vulnerabilities, and secure software development practices.
- Require understanding of modern software architectures, APIs, cloud-native applications, and CI/CD pipelines.
- Require experience reviewing Java, C#, Python, JavaScript/TypeScript, Go, or similar languages.
- Require experience with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube, plus familiarity with secure SDLC and DevSecOps practices.
- Require hands-on experience with generative AI or AI-assisted developer and security tools in engineering, code review, security testing, or DevSecOps workflows.
- Require ability to communicate security findings and remediation guidance to developers and technical leadership.
- Require an undergraduate degree in a related field or an equivalent combination of training and experience.
- Prefer experience creating prompts, workflows, agents, or automations.
- Prefer experience using large language models to improve security analysis, code review efficiency, vulnerability triage, or secure development workflows.
- Prefer familiarity with LLM security risks, prompt injection, insecure code generation, model misuse, and AI application attack vectors.
- Prefer experience reviewing applications using machine learning, generative AI, agentic AI, or AI-enabled business processes.
Benefits
- Hybrid working model designed to provide flexibility while supporting in-person learning, collaboration, and connection.
Tech Stack
Categories
About Vanguard
Vanguard is an investment management company offering low-cost index and active mutual funds, ETFs, brokerage, retirement plans, and financial advice for individual, institutional, and advisor clients. Founded in 1975 by John C. Bogle and headquartered in Valley Forge, PA, it operates a client-owned structure in which its funds own the firm. Its business model centers on asset-based management and advisory fees.