Application Security Engineer — Hybrid, SDLC & CI/CD Focus

Vanguard; Charlotte (NC); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Vanguard is seeking an Application Security Specialist to help secure its software development lifecycle and delivery processes. You will guide security strategy, implement new technologies, and maintain technical controls to enable secure, rapid development.

You will collaborate with developers to integrate security into CI/CD pipelines, perform testing across APIs, containers, and cloud-native components, and mentor teams on best practices for secure development and vulnerability remediation.

Qualifications

• Undergraduate degree in a related field or equivalent experience.
• Proven experience deploying and operating DAST tools with CI/CD integration.
• Experience with SAST, SCA, IAST, RASP and other security tools.

Responsibilities

• Guide Application Security strategy and secure the software development lifecycle (SDLC).
• Drive API, Container, and Application Security testing initiatives, including DAST and other validation capabilities.
• Develop strategies to secure current and emerging technologies (containers, serverless, API, AI/ML).
• Provide hands‑on engineering support for security incidents, threat events, vulnerability management, and control improvements.
• Gather and report metrics from Application Security solutions and processes to provide insights into security coverage, risk reduction, and maturity.
• Create and maintain technical standards, procedures, and documentation leveraging NIST, OWASP, SANS guidance.
• Provide technical mentorship and training to development and cloud engineering teams on secure development practices for API, Container security, and vulnerability remediation.
• Implement, optimize, and operationalize Application Security solutions to improve risk visibility and developer adoption.
• Drive automation and security capabilities that streamline security processes and align with enterprise goals.
• Stay informed on emerging Application Security trends and best practices to enhance Vanguard's security posture.

Skills

CI/CD expertise

Secure SDLC knowledge

Threat & vulnerability management

Mentoring developers

Education

Bachelor's degree

Tools

DAST tools

SAST

SCA

IAST

RASP

Job description

Vanguard is seeking an Application Security Specialist to help secure its software development lifecycle and delivery processes. You will guide security strategy, implement new technologies, and maintain technical controls to enable secure, rapid development.

You will collaborate with developers to integrate security into CI/CD pipelines, perform testing across APIs, containers, and cloud-native components, and mentor teams on best practices for secure development and vulnerability remediation.