Senior Application Security Engineer: SDLC & DevSecOps Expert

Vanguard; Malvern (Chester County); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Vanguard is seeking an Application Security Specialist to shape and protect the SDLC across Vanguard applications. You will drive test initiatives, support incident response, and mentor engineers on secure development practices within a hybrid work model at Vanguard.

The role emphasizes securing containers, APIs, serverless architectures, and emerging technologies while aligning with NIST, OWASP, and MITRE standards and fostering improved developer experience.

Qualifications

• Undergraduate degree in a related field or equivalent combination of training and experience.
• Strong experience deploying and operating DAST tools to include managing team onboarding, authentication setup, and CI/CD integration.
• Experience with other well-known application security tools (SAST, SCA, IAST, RASP, etc.)
• Strong knowledge of application development, build, and deployment processes (development, IDEs, repositories, branching, pipelines, cloud, containers, serverless, etc.).
• Familiarity with industry standards such as NIST, OWASP, and MITRE.
• Relevant certifications in application development, security, application security, DevSecOps, or cloud are a plus.

Responsibilities

• Guide Application Security strategy and secure the SDLC.
• Drive API, Container, and Application Security testing initiatives (DAST, etc.).
• Develop strategies to secure containers, serverless, API, and AI/ML.
• Provide hands-on engineering support for security incidents and vulnerability management.
• Gather and report metrics to demonstrate security coverage and risk reduction.
• Create and maintain technical standards and procedures following NIST/OWASP/SANS guidance.
• Mentor development and cloud engineering teams on secure dev practices.

Skills

DAST tooling

CI/CD integration

App security testing

Threat modeling

Security engineering

Developer collaboration

Education

Bachelor's degree or equivalent

Tools

DAST tools

SAST

SCA

IAST

RASP

Job description

Vanguard is seeking an Application Security Specialist to shape and protect the SDLC across Vanguard applications. You will drive test initiatives, support incident response, and mentor engineers on secure development practices within a hybrid work model at Vanguard.

The role emphasizes securing containers, APIs, serverless architectures, and emerging technologies while aligning with NIST, OWASP, and MITRE standards and fostering improved developer experience.