Cloud Container Security Lead: AWS/EKS & AI-Driven Defense

Vanguard; Charlotte (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

Vanguard seeks a hands-on container security lead to own and mature security across AWS ECS/EKS and Serverless workloads, with cross‑cloud coverage in Azure AKS and GCP GKE. You will drive image scanning, base image hardening, runtime visibility, risk prioritization, and remediation using Wiz, partnering with engineering to enable secure‑by‑default deployments.

You will champion automation and AI‑driven detection, develop scalable controls, and deliver measurable security postures through

Qualifications

• Undergraduate degree or equivalent experience.
• Hands-on experience securing containerized AWS ECS/EKS and serverless workloads.
• Experience with Wiz for container, cloud, and configuration risk visibility and remediation.
• Strong understanding of container lifecycle, image management, and runtime security concepts.
• Experience with CI/CD pipelines and cloud-native architectures.

Responsibilities

• Lead hands-on container security across AWS (ECS/EKS) and Serverless workloads, with multi-cloud coverage.
• Use Wiz to assess and remediate container, cloud configuration, and workload risks with risk-based prioritization.
• Drive implementation and maturity of container security controls, coverage, enforcement, and monitoring.
• Identify and remediate vulnerabilities in images, dependencies, and deployment pipelines with engineering teams.
• Develop strategies to secure cloud-native workloads and extend controls to Azure and GCP where applicable.
• Partner with platform and engineering teams to enforce secure configurations and hardened base images.
• Identify automation opportunities to improve container security processes and reduce manual effort.
• Leverage AI/ML to enhance threat detection and automated remediation across build and runtime environments.
• Gather and report metrics to show container security posture and program maturity.
• Provide guidance and training on secure container development and deployment practices.
• Maintain documentation for container security processes, tools, and standards.

Skills

Hands-on container security

AWS container security (ECS/EKS)

Serverless security

CI/CD security

AI/ML-driven security

Threat detection & remediation

Education

Undergraduate degree or equivalent experience

Tools

Wiz

CI/CD tools

Job description

Vanguard seeks a hands-on container security lead to own and mature security across AWS ECS/EKS and Serverless workloads, with cross‑cloud coverage in Azure AKS and GCP GKE. You will drive image scanning, base image hardening, runtime visibility, risk prioritization, and remediation using Wiz, partnering with engineering to enable secure‑by‑default deployments.

You will champion automation and AI‑driven detection, develop scalable controls, and deliver measurable security postures through