AppSec & Secrets Architect (Credential Lifecycle)

Vanguard; Dallas (TX); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

Health and wellness benefits

Work-life balance

Job summary

Vanguard is seeking an expert-level security leader to own the design and evolution of security features across systems and products. You will drive secure architecture, oversee secrets lifecycle, and champion risk-informed decisions within the Global Risk and Security organization.

You will collaborate with IAM, platform, and engineering teams to implement vault strategies, remediation workflows, and governance.

Qualifications

• Experience in Application Security, DevSecOps, IAM, Cloud Security, or Security Operations.
• Familiarity with GitHub, GitHub Advanced Security (GHAS), Secrets Scanning, and CI/CD platforms.

Responsibilities

• Investigate, validate, and triage exposed credentials, API keys, tokens, certificates, and other sensitive secrets using risk-based prioritization.
• Partner with application teams to drive timely remediation, credential rotation, revocation, and secure replacement of exposed secrets.
• Support the implementation and administration of GitHub Advanced Security (GHAS) Secret Protection, push protection, custom detection patterns, and enterprise scanning controls.
• Define, document, and maintain secrets classification standards, severity models, response procedures, and governance processes.
• Collaborate with IAM and platform teams to improve credential lifecycle management practices, including vault adoption, rotation controls, and privileged access management integration.
• Develop dashboards, metrics, and reporting to measure secrets exposure trends, remediation effectiveness, SLA performance, and program maturity.
• Support exception management workflows, bypass approvals, evidence collection, and audit readiness activities for secrets‑related controls.
• Work with engineering, AppSec, and security advisor teams to identify recurring exposure patterns and improve preventive controls.
• Create developer‑facing guidance, training materials, and best practices to promote secure secrets handling throughout the SDLC.
• Identify automation opportunities through APIs, workflows, and AI‑assisted capabilities to streamline detection, triage, ownership mapping, and remediation processes.
• Participate in on‑call support and incident response activities involving exposed credentials, credential abuse, and software supply chain security events.

Skills

Application Security

DevSecOps

IAM

Cloud Security

Security Operations

GitHub/GHAS

Secrets Scanning

CI/CD

Automation (Python/PowerShell/JS)

Strong Communication

Tools

GitHub

GHAS

CI/CD Platforms

Job description

Vanguard is seeking an expert-level security leader to own the design and evolution of security features across systems and products. You will drive secure architecture, oversee secrets lifecycle, and champion risk-informed decisions within the Global Risk and Security organization.

You will collaborate with IAM, platform, and engineering teams to implement vault strategies, remediation workflows, and governance.