Secrets Management Lead

Vanguard; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

Vanguard is seeking a Secrets Solution Tech Lead to define and lead the enterprise-wide strategy, architecture, and implementation of secrets detection, prevention, and remediation across the software development lifecycle. This role drives scalable, developer-friendly security solutions while ensuring effective risk reduction and governance of secrets exposure.

The position collaborates with IAM, leads CI/CD integration, and shapes standards, dashboards, and reporting.

Qualifications

• Minimum of five years related work experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.

Responsibilities

• Define enterprise strategy for secrets detection, prevention, and remediation.
• Own architecture and design of secrets scanning solutions across SDLC.
• Establish standards, policies, and guardrails for secrets management at scale.
• Lead integration of secrets controls across CI/CD pipelines and developer platforms.
• Drive enterprise rollout of secrets scanning with full coverage (e.g., GHAS, Wiz).
• Define risk-based prioritization model for secrets exposure and remediation.
• Partner with IAM to align credential lifecycle, rotation, and governance controls.
• Lead cross-team coordination for detection → response workflows.
• Drive automation strategy for detection, validation, and remediation at scale.
• Influence tooling roadmap, vendor feature requests, and capability enhancements.
• Establish KPIs, dashboards, and reporting for secrets risk posture and burn-down.
• Mentor junior engineers and provide technical leadership across AppSec initiatives.

Education

Bachelor's degree

Graduate degree preferred

Job description

The Secrets Solution Tech Lead is responsible for defining and leading the enterprise-wide strategy, architecture, and implementation of secrets detection, prevention, and remediation capabilities across the software development lifecycle (SDLC). This role drives scalable, developer-friendly security solutions while ensuring effective risk reduction and governance of secrets exposure.

Core Responsibilities

• Define enterprise strategy for secrets detection, prevention, and remediation
• Own architecture and design of secrets scanning solutions across SDLC
• Establish standards, policies, and guardrails for secrets management at scale
• Lead integration of secrets controls across CI/CD pipelines and developer platforms
• Drive enterprise rollout of secrets scanning (e.g., GHAS, Wiz) with full coverage
• Define risk-based prioritization model for secrets exposure and remediation
• Partner with IAM to align credential lifecycle, rotation, and governance controls
• Lead cross-team coordination for detection → response workflows
• Drive automation strategy for detection, validation, and remediation at scale
• Influence tooling roadmap, vendor feature requests, and capability enhancements
• Establish KPIs, dashboards, and reporting for secrets risk posture and burn-down
• Mentor junior engineers and provide technical leadership across AppSec initiatives

Qualifications

• Minimum of five years related work experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.

Sponsorship

Vanguard is not offering visa sponsorship for this position.