AppSec & Secrets Management Architect

Vanguard; Malvern (Chester County); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Health and wellness benefits

Work‑life balance

Investment in your future

Hybrid work model

Job summary

Vanguard's Global Risk and Security team in Malvern seeks an expert-level security leader to own the design and evolution of security features across systems and applications. You will influence secure architecture, lead complex initiatives, and provide technical leadership to strengthen the product security posture while enabling business objectives.

You will partner with IAM, DevSecOps, and platform teams, develop dashboards, and create developer-facing guidance to promote secure SDLC

Qualifications

• Experience in Application Security, DevSecOps, IAM, Cloud Security, or Security Operations.
• Familiarity with GitHub, GHAS, Secrets Scanning, and CI/CD platforms.
• Understanding of cloud credentials, API tokens, and privileged access concepts.
• Knowledge of secure SDLC practices and software supply chain security.

Responsibilities

• Investigate, validate, and triage exposed credentials, keys, tokens, and secrets.
• Remediate, rotate, revoke, and securely replace exposed secrets with teams.
• Support GHAS Secret Protection, push protection, and enterprise scanning controls.
• Define secrets classification, severity models, and governance processes.
• Improve credential lifecycle management with vault adoption and PAM integration.
• Develop dashboards and metrics to measure secrets exposure and program maturity.
• Assist with exception workflows, evidence collection, and audit readiness.
• Work with engineering, AppSec, and security advisor teams to reduce exposures.
• Create developer-facing guidance and best practices for SDLC security.
• Identify automation opportunities via APIs, workflows, and AI-assisted tooling.
• Participate in on-call and incident response for credential-related events.

Skills

Application Security

DevSecOps

IAM

Cloud Security

Security Operations

Scripting

Tools

GitHub

GHAS

Secrets Scanning

CI/CD Platforms

Job description

Vanguard's Global Risk and Security team in Malvern seeks an expert-level security leader to own the design and evolution of security features across systems and applications. You will influence secure architecture, lead complex initiatives, and provide technical leadership to strengthen the product security posture while enabling business objectives.

You will partner with IAM, DevSecOps, and platform teams, develop dashboards, and create developer-facing guidance to promote secure SDLC