Offensive Security Threat Emulation Engineer

Vanguard; Malvern (Chester County); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Vanguard's Global Risk and Security (GR&S) Enterprise Security and Fraud team in Malvern, PA, seeks an experienced security professional to lead responses to cyber security alerts and incidents, and to develop protections across Vanguard's assets.

The role emphasizes threat analysis, vulnerability assessments, and collaboration with IT and business units to translate findings into concrete mitigations while mentoring junior staff.

Qualifications

• Five years of related work experience, with three years in threat analysis.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Experience in offensive security disciplines including penetration testing, vulnerability analysis, web application security assessments, adversary emulation, and threat intelligence.
• OSCP, OSWA or equivalent certification preferred.
• Strong collaboration skills with the ability to work across teams within the division.

Responsibilities

• Leads and responds to escalated cyber security alerts, cyber incidents, or related security investigations.
• Identifies real-time complex attack patterns and suggests mitigation strategies.
• Leads the processes, tools and measures to monitor and detect compromises, risks, vulnerabilities, network security threats, tools and tactics used by modern and emerging threat actors.
• Facilitates security operations and incident response technologies and methodologies.
• Develops, manages, maintains and enhances security controls for the security platforms.
• Reviews the network environment for new and evolving cyber threats and providing preventive and remedial solutions.
• Identifies malicious activity by performing analysis on logs, traffic flows, and other investigative detective activities.
• Conducts penetration testing, vulnerability assessments and threat modeling.
• Evaluates risks and makes recommendations.
• Provides written assessments focused on threats, vulnerabilities, and technologies relevant to Vanguard Infrastructure.
• Leads with IT and business teams to ensure prompt and effective distribution of findings so incidents are effectively addressed.

Skills

Threat analysis

Penetration testing

Security operations

Incident response

Education

Bachelor's degree in related field

Job description

Vanguard's Global Risk and Security (GR&S) Enterprise Security and Fraud team in Malvern, PA, seeks an experienced security professional to lead responses to cyber security alerts and incidents, and to develop protections across Vanguard's assets.

The role emphasizes threat analysis, vulnerability assessments, and collaboration with IT and business units to translate findings into concrete mitigations while mentoring junior staff.