Application Security Strategist

The Vanguard Group; Malvern (Chester County); Hybrid; USD 120,000 - 190,000; Full time

Job summary

The Vanguard Group is seeking an experienced Application Security professional to define and implement secure SDLC practices across our organization. You will partner with development teams to establish security requirements early in the software development lifecycle and design controls for APIs, cloud-native apps, containers, and serverless platforms.

Join Vanguard’s Global Risk and Security team in a hybrid role based in Malvern, PA, and help automate security processes, assess

Qualifications

• Minimum of five years related work experience.
• Undergraduate degree in a related field or equivalent experience.
• Strong experience in Application Security, Secure SDLC, DevSecOps, or Software Engineering.
• Hands-on experience securing CI/CD pipelines and modern development environments.
• Experience with SAST, SCA, IAST, DAST, API Security, and Container Security.
• Experience with cloud platforms and cloud-native technologies.

Responsibilities

• Help define and implement Application Security strategy and secure SDLC practices across the organization.
• Partner with development teams to establish security requirements early in the software development lifecycle.
• Design and implement security controls and guardrails for APIs, cloud-native apps, containers, serverless platforms, and emerging tech.
• Assess, prioritize, and drive remediation of vulnerabilities from SAST, SCA, IAST, DAST, container and cloud security tools.
• Develop security metrics, reporting, and dashboards to measure program effectiveness and maturity.

Skills

Security engineering

Secure SDLC

DevSecOps

CI/CD security

SAST

Education

Bachelor’s degree

Tools

Cloud platforms

Container security

Job description

The Vanguard Group is seeking an experienced Application Security professional to define and implement secure SDLC practices across our organization. You will partner with development teams to establish security requirements early in the software development lifecycle and design controls for APIs, cloud-native apps, containers, and serverless platforms.

Join Vanguard’s Global Risk and Security team in a hybrid role based in Malvern, PA, and help automate security processes, assess