DevSecOps Security Leader - Secure SDLC & Cloud Apps

Vanguard; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Vanguard is seeking an Applications Security Specialist to strengthen the SDLC by partnering with development, cloud, and platform engineering teams. The role focuses on embedding security into delivery and defining guardrails for secure software.

You will lead security controls for APIs, containers, and cloud-native apps, conduct threat analyses, automate processes, and mentor teams on secure coding and remediation.

Qualifications

• Minimum of five years of related work experience.
• Undergraduate degree in a related field.
• Strong experience in Application Security and DevSecOps.
• Hands-on experience securing CI/CD pipelines.
• Experience with SAST, SCA, IAST, DAST, API Security, and Container Security.
• Experience working with cloud platforms and cloud-native technologies.
• Strong communication, collaboration, and problem-solving skills.

Responsibilities

• Define and implement Application Security strategy across the SDLC.
• Partner with development teams to embed security requirements early in the software development lifecycle.
• Design and enforce security controls and guardrails for APIs, containers, serverless platforms, and cloud-native apps.
• Develop and maintain security standards and architecture patterns.
• Assess, prioritize, and remediate vulnerabilities identified through SAST/DAST/IAST.

Skills

Security Strategy

DevSecOps

CI/CD Security

Threat Modeling

Communication

Education

Bachelor's degree in related field

Tools

SAST

SCA

IAST

DAST

Container Security

Cloud Security

Job description

Vanguard is seeking an Applications Security Specialist to strengthen the SDLC by partnering with development, cloud, and platform engineering teams. The role focuses on embedding security into delivery and defining guardrails for secure software.

You will lead security controls for APIs, containers, and cloud-native apps, conduct threat analyses, automate processes, and mentor teams on secure coding and remediation.