Cloud Security Penetration Tester

The Vanguard Group, Inc.; Dallas (TX); Hybrid; USD 170,000 - 210,000; Full time

Job summary

Vanguard Group is seeking a seasoned Cloud Penetration Tester to lead and execute security assessments across multi-cloud environments and cloud-hosted applications. You will deliver thorough findings to technical teams and leadership, while shaping testing methodologies and best practices.

The role requires extensive hands-on cloud security experience, strong reporting skills, and the ability to communicate complex vulnerabilities and remediation strategies.

Qualifications

• Ten years of related experience with at least three in information security.
• Undergraduate degree or equivalent experience.
• Hands-on cloud, web app, and API penetration testing across multiple cloud platforms.
• Experience with Burp Suite, Pacu, RedBoto, CloudBrute, ScoutSuite and Prowler.
• Ability to document vulnerabilities, exploitation scenarios, business impact, and remediation.
• Security certifications such as GIAC or OffSec are preferred.

Responsibilities

• Plan, lead, and conduct cloud penetration tests across multi-cloud environments and cloud-hosted apps.
• Perform manual and automated testing to identify vulnerabilities, misconfigurations, IAM weaknesses, and privilege escalation paths.
• Develop detailed assessment reports and present findings to technical teams and leadership.
• Lead reporting and collaborate with IT sub-divisions, partners, and business units to assess technology impact.
• Advance cloud penetration testing methodologies, tooling, automation, standards, and best practices.
• Maintain subject matter expertise and stay current with emerging vulnerabilities and attack techniques.
• Evaluate and onboard new tooling and develop custom tools as needed.
• Participate in special projects and other duties as assigned.

Skills

Penetration testing

Cloud security

Threat modeling

Report writing

Team collaboration

Education

Bachelor's degree or equivalent

Tools

Burp Suite

Pacu

Redboto

CloudBrute

ScoutSuite

Prowler

Job description

Responsibilities

• Plans, leads, and conducts penetration tests across multi-cloud environments and cloud-hosted applications.
• Performs manual and automated testing to identify and validate vulnerabilities, misconfigurations, IAM weaknesses, privilege-escalation paths, insecure trust relationships, and cloud attack paths.
• Develops detailed assessment reports and presents findings to technical teams and leadership.
• Leads reporting and collaborates with IT sub-divisions, third-party partners, and business units to identify the impact of technology implementations on IT and business operations.
• Leads the evolution of cloud penetration testing methodologies, tooling, automation, standards, and best practices.
• Maintains subject matter expertise.
• Researches emerging cloud vulnerabilities, attack techniques, and offensive security tooling.
• Leads the evaluation and onboarding of new tooling, and develops custom tools as needed.
• Participates in special projects and performs other duties as assigned.

Qualifications

• Minimum of ten years of related work experience, including at least three years in information security.
• Undergraduate degree in related field or equivalent combination of training and experience.
• Hands-on experience performing penetration testing or offensive security assessments across multiple cloud platforms.
• Experience performing cloud, web application, and API penetration testing using tools such as Burp Suite, Pacu, Redboto, CloudBrute, ScoutSuite, and Prowler.
• Ability to clearly document and communicate technical vulnerabilities, exploitation scenarios, business impact, and remediation recommendations.
• Preferred industry security certifications such as GIAC Cloud Penetration Tester (GCPN), OffSec Certified Professional (OSCP), GIAC Penetration Tester (GPEN), OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), etc.

Special Factors

Sponsorship Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team.

How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection.

We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Vanguard, one of the world's leading investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals.

We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.