Senior AI-Driven Application Security Analyst

The Vanguard Group; Malvern (Chester County); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Vanguard in Malvern, PA is seeking an experienced security professional to perform manual and AI-assisted secure code reviews across modern application stacks. You will analyze source code to identify vulnerabilities and guide remediation with engineering teams.

The role emphasizes developing prompts and review methodologies for AI-assisted reviews, reducing false positives, and improving repeatability. You will collaborate with developers, penetration testers, and threat modelers, contributing

Qualifications

• 5+ years of related work experience in application security, secure code review, or software engineering with a security focus.
• Strong understanding of secure coding principles, application security vulnerabilities (OWASP Top 10 and common application vulnerabilities), and secure software development practices.
• Undergraduate degree in a related field or an equivalent combination of training and experience.

Responsibilities

• Performs manual and AI-assisted secure code reviews across modern application stacks, analyzing source code to identify vulnerabilities, logic flaws, and insecure coding practices.
• Develops and optimizes prompts, workflows, and review methodologies that improve the effectiveness and repeatability of AI-assisted code review activities.
• Validates and refines vulnerability findings, reducing false positives and identifying overlooked risks.
• Produces clear technical reports and risk-based recommendations.
• Partners with development teams to explain findings, assess risk, and provide actionable remediation guidance.

Skills

Secure coding

OWASP Top 10

CI/CD pipelines

SAST tools

Java

C#

Python

JavaScript/TypeScript

Go

AI-assisted workflows

Communication with technical leaders

Education

Bachelor's degree in related field

Tools

Checkmarx

Fortify

Veracode

Semgrep

SonarQube

Job description

Vanguard in Malvern, PA is seeking an experienced security professional to perform manual and AI-assisted secure code reviews across modern application stacks. You will analyze source code to identify vulnerabilities and guide remediation with engineering teams.

The role emphasizes developing prompts and review methodologies for AI-assisted reviews, reducing false positives, and improving repeatability. You will collaborate with developers, penetration testers, and threat modelers, contributing