AI-Driven App Security Analyst & Secure Code Reviewer

The Vanguard Group; Malvern (Chester County); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Vanguard is seeking an Application Security professional to perform manual and AI-assisted secure code reviews across modern application stacks. You will analyze source code to identify vulnerabilities, validate findings, and produce technical reports with risk-based recommendations.

The role requires 3+ years in application security and familiarity with SAST tools and secure SDLC practices. A hybrid work model and collaboration with development teams are emphasized.

Qualifications

• Minimum of 3 years of related work experience in application security, secure code review, or software engineering with a security focus.
• Understanding of secure coding principles, OWASP Top 10 and common vulnerabilities, and secure software development practices.
• Familiarity with modern software architectures, APIs, cloud-native applications, and CI/CD pipelines.
• Familiarity with Java, C#, Python, JavaScript/TypeScript, Go, or similar languages.
• Familiarity with SAST tools and secure SDLC/DevSecOps practices.
• Experience with generative AI or AI-assisted developer/security tools in software development or security testing.
• Ability to communicate security findings to developers and technical teams.
• Undergraduate degree in a related field or equivalent experience.
• Experience creating prompts, workflows, or automations preferred.

Responsibilities

• Performs manual and AI-assisted secure code reviews across modern application stacks.
• Utilizes prompts, workflows, and review methodologies to support AI-assisted reviews.
• Reviews and validates vulnerability findings from automated analyses.
• Produces clear technical reports and risk-based recommendations.
• Works with development teams to communicate findings and support remediation.
• Collaborates with penetration testers and security teams.
• Supports team processes, methodologies, and automation initiatives.

Skills

Application security

Secure code review

CI/CD pipelines

SAST tools

AI-assisted review

Communication with developers

Education

Undergraduate degree in a related field

Tools

Checkmarx

Fortify

Veracode

Semgrep

SonarQube

Job description

Vanguard is seeking an Application Security professional to perform manual and AI-assisted secure code reviews across modern application stacks. You will analyze source code to identify vulnerabilities, validate findings, and produce technical reports with risk-based recommendations.

The role requires 3+ years in application security and familiarity with SAST tools and secure SDLC practices. A hybrid work model and collaboration with development teams are emphasized.