Offensive Security Engineer, Specialist

Vanguard; Charlotte (NC); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard seeks an experienced Security Engineer to design and operate offensive security platforms and cloud environments. You will engineer primarily in Microsoft Azure with AWS support, and build infrastructure as code using Terraform, Bicep/ARM, or CloudFormation.

The role emphasizes automating provisioning, patching, and lifecycle management with Python, PowerShell, Bash, or Go, while developing CI/CD pipelines and containerized deployment patterns to enable scalable offensive security

Qualifications

• 5+ years in Security/Cloud engineering or related field.
• Hands-on experience designing and operating Microsoft Azure environments.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Automation experience using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with container technologies like Docker and Kubernetes.

Responsibilities

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure, with AWS support.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions for offensive security operations.

Skills

Cloud security engineering

Azure expertise

AWS knowledge

Infrastructure as Code

Automation scripting

CI/CD pipelines

Container technologies

Networking fundamentals

Tools

Terraform

Bicep/ARM

CloudFormation

Docker

Kubernetes

Kali Linux

Burp Suite

BloodHound

Metasploit

Sliver

Job description

What You’ll Do

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure , with additional support across AWS.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation , or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go , or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Required Qualifications

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands‑on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git‑based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Preferred Qualifications

• Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• Experience building security labs, cyber ranges, or isolated testing environments.
• Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• Experience developing internal platforms, APIs, or self‑service capabilities.
• Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• Experience with AI‑enabled security automation.
• Relevant Azure, AWS, Terraform, or security certifications.

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don’t just have a mission—we’re on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients’ lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection. We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.