Secrets Management Lead

Vanguard; Malvern (Chester County); On-site; USD 150,000 - 230,000; Full time

Job summary

Vanguard is seeking a Secrets Solution Tech Lead to define and drive the enterprise strategy, architecture, and implementation of secrets detection, prevention, and remediation across the SDLC.

This role leads scalable, developer-friendly security solutions, partners with IAM, and mentors engineers while establishing KPIs and governance to reduce risk.

Qualifications

• Minimum of five years related work experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.

Responsibilities

• Define enterprise strategy for secrets detection, prevention, and remediation.
• Own architecture and design of secrets scanning solutions across SDLC.
• Establish standards, policies, and guardrails for secrets management at scale.
• Lead integration of secrets controls across CI/CD pipelines and developer platforms.
• Drive enterprise rollout of secrets scanning with full coverage.
• Define risk-based prioritization model for secrets exposure and remediation.
• Partner with IAM to align credential lifecycle, rotation, and governance controls.
• Lead cross-team coordination for detection → response workflows.
• Drive automation strategy for detection, validation, and remediation at scale.
• Influence tooling roadmap, vendor feature requests, and capability enhancements.
• Establish KPIs, dashboards, and reporting for secrets risk posture and burn-down.
• Mentor junior engineers and provide technical leadership across AppSec initiatives

Skills

Security leadership

AppSec

CI/CD knowledge

Education

Undergraduate degree or equivalent

Graduate degree preferred

Job description

The Secrets Solution Tech Lead is responsible for defining and leading the enterprise-wide strategy, architecture, and implementation of secrets detection, prevention, and remediation capabilities across the software development lifecycle (SDLC). This role drives scalable, developer-friendly security solutions while ensuring effective risk reduction and governance of secrets exposure.

Core Responsibilities

• Define enterprise strategy for secrets detection, prevention, and remediation
• Own architecture and design of secrets scanning solutions across SDLC
• Establish standards, policies, and guardrails for secrets management at scale
• Lead integration of secrets controls across CI/CD pipelines and developer platforms
• Drive enterprise rollout of secrets scanning (e.g., GHAS, Wiz) with full coverage
• Define risk-based prioritization model for secrets exposure and remediation
• Partner with IAM to align credential lifecycle, rotation, and governance controls
• Lead cross-team coordination for detection → response workflows
• Drive automation strategy for detection, validation, and remediation at scale
• Influence tooling roadmap, vendor feature requests, and capability enhancements
• Establish KPIs, dashboards, and reporting for secrets risk posture and burn-down
• Mentor junior engineers and provide technical leadership across AppSec initiatives

Qualifications

• Minimum of five years related work experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.

Sponsorship

Vanguard is not offering visa sponsorship for this position.