AI-Powered Secure Code Reviewer

Vanguard; Malvern (Chester County); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Vanguard in Malvern, PA is seeking a Secure Code Reviewer to join the Threat Modeling & Validation team. You will perform secure code reviews of internally developed applications and services, identifying vulnerabilities and assisting with remediation.

The role combines manual review with AI analysis to catch issues early in the software development lifecycle, and requires collaboration with developers, security teams, and testers.

Qualifications

• Minimum 3 years of work experience in application security or secure code review.
• Strong knowledge of OWASP Top 10 and secure SDLC practices.
• Experience with modern architectures, APIs, cloud-native apps, and CI/CD pipelines.
• Experience with Java, C#, Python, JavaScript/TypeScript, or Go.
• Experience with SAST tools (Checkmarx, Fortify, Veracode, Semgrep, SonarQube) and AI-assisted review.
• Excellent communication of findings and remediation guidance to developers.
• Bachelor's degree or equivalent in a related field.

Responsibilities

• Performs manual and AI-assisted secure code reviews across application stacks, analyzing source code to identify vulnerabilities, logic flaws, and insecure coding practices.
• Reviews and validates vulnerability findings identified through automated and AI-assisted analysis.
• Produces clear technical reports and risk-based recommendations.
• Works with development teams to communicate findings and support remediation efforts.
• Collaborates with penetration testers, threat modelers, and application security teams.
• Supports team processes, methodologies, and automation initiatives.

Skills

Java

C#

Python

JavaScript/TypeScript

Go

CI/CD

SAST Tools

AI tools

Secure coding

Communication

Education

Bachelors Degree

Tools

Checkmarx

Fortify

Veracode

Semgrep

SonarQube

Job description

Vanguard in Malvern, PA is seeking a Secure Code Reviewer to join the Threat Modeling & Validation team. You will perform secure code reviews of internally developed applications and services, identifying vulnerabilities and assisting with remediation.

The role combines manual review with AI analysis to catch issues early in the software development lifecycle, and requires collaboration with developers, security teams, and testers.