Cyber Threat Management Analyst, Specialist

The Vanguard Group, Inc.; Dallas (TX); Hybrid; USD 90,000 - 150,000; Full time

Job summary

Vanguard is seeking a cybersecurity professional to join our security operations team. You will respond to alerts and incidents, perform threat analyses, and contribute to improving detection, response, and remediation across Vanguard's enterprise systems.

You will develop and maintain security controls, collaborate with IT and business units, and participate in special projects to strengthen data protection and prevent data exposure across cloud and on-premises environments.

Qualifications

• Minimum of three years related work experience, with two years in threat analysis.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Must be able to obtain CISSP within one year of hire.

Responsibilities

• Assists and responds independently to cyber security alerts, incidents, or investigations and suggests mitigation strategies.
• Supports processes, tools and measures to monitor and detect compromises and threats across Vanguard infrastructure.
• Develops and maintains security controls, rules, policies, and signatures for security platforms.
• Monitors network environment for evolving threats and provides preventive and remedial solutions.
• Conducts penetration testing, vulnerability assessments and threat modeling with risk-based recommendations.
• Performs analysis and writes assessments on threats, vulnerabilities and technologies relevant to Vanguard.
• Collaborates with IT and business teams to disseminate findings and support enterprise security initiatives.
• Participates in special projects and other duties as assigned.

Skills

Threat analysis

Cyber security

Incident response

Security monitoring

Communication

Education

Bachelor's degree in related field

Job description

Core Responsibilities

• 1. Assists and responds independently to cyber security alerts, cyber incidents, or related security investigations. Identifies real-time complex attack patterns and suggests mitigation strategies.
• 2. Supports the processes, tools and measures to monitor and detect compromises, risks, vulnerabilities, network security threats, tools, and tactics used by modern and emerging threat actors. Facilitates security operations and incident response technologies and methodologies.
• 3. Develops, manages, maintains and enhances security controls (alerts, rules, policies, and signatures) for the security platforms.
• 4. Monitors the network environment for new and evolving cyber threats and provides preventive and remedial solutions. Identifies malicious activity by performing analysis on logs, traffic flows, and other investigative detective activities.
• 5. Conducts penetration testing, vulnerability assessments and threat modeling. Evaluates risks and makes recommendations.
• 6. Performs analysis and provides written assessments focused on threats, vulnerabilities, and technologies relevant to Vanguard infrastructure.
• 7. Collaborates with IT and business teams to ensure prompt and effective distribution of findings to address incidents in the most effective and efficient manner possible. Provides department support to the business on enterprise-wide security initiatives and projects.
• 8. Participates in special projects and performs other duties as assigned.

Qualifications

Minimum of three years related work experience, with two years experience in threat analysis. Undergraduate degree in a related field or the equivalent combination of training and experience. Must be obtain CISSP within one year of hire.

Additional Job Description

• Data exposure risk remediation at enterprise scale: Leads technical execution of the Oversharing Remediation Program. It has delivered more than 1.33 million remediations across collaboration and cloud storage platforms.
• Data access risk analysis and governance: Analyzes complex permission models (organization-wide access groups, inherited and direct permissions, external and anonymous sharing links) to find and remediate overexposed sensitive data. Also designs remediation options for leadership decisions and supports AI and Copilot readiness.
• Cloud DLP policy design and implementation: Designs, builds and puts in place Cloud DLP policies across IaaS, PaaS and SaaS platforms. This includes detection logic for sensitive data, tuning policies to reduce false positives, and handling exceptions.
• Automation of DLP and data security posture: Engineers automated workflows across DLP, data exposure and data security posture management. Examples are automated quarantine of sensitive data, resolving and notifying data owners, fallback handling when no owner can be found, and change-approved remediation that runs continuously.
• Identity-driven access cleanup: Works with IAM teams to define criteria, exceptions and testing for removing stale and orphaned access, such as access held by disabled users. Aligns remediation logic with identity governance requirements.

What makes this skillset niche: Combines data exposure and access risk analysis, cloud DLP engineering, and security automation, and he works across the SOC, infrastructure, IAM and vendor teams to get changes approved through CAB. Few people have all of these skills, and this program knowledge would take a backfill a long time to learn.

Special Factors Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

About Us

Vanguard, one of the world's largest investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.