Offensive Security Engineer, Specialist

Vanguard; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard in Malvern, PA, seeks a senior Security Engineer to design, build, and maintain offensive security platforms and cloud environments. You will focus on Microsoft Azure with AWS support and develop IaC using Terraform, Bicep/ARM, or CloudFormation.

You will automate provisioning and lifecycle management with Python, PowerShell, Bash, or Go, build CI/CD pipelines, deploy security tooling for testing, and implement cloud security controls, IAM, monitoring, and hardening.

Qualifications

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands-on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Responsibilities

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure, with additional support across AWS.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Skills

Security engineering

5+ years exp

Cloud engineering

DevSecOps

Platform engineering

CI/CD

Networking & IAM

Windows/Linux

Container technologies

Go/Python/PowerShell

Tools

Microsoft Azure

AWS

Terraform

Bicep/ARM

CloudFormation

Python

PowerShell

Bash

Go

Git

Job description

What You'll Do

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure , with additional support across AWS .
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation , or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go , or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Required Qualifications

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands-on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Preferred Qualifications

• Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• Experience building security labs, cyber ranges, or isolated testing environments.
• Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• Experience developing internal platforms, APIs, or self-service capabilities.
• Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• Experience with AI-enabled security automation.
• Relevant Azure, AWS, Terraform, or security certifications.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.