Senior AppSec Engineer (Hybrid) - Secure SDLC & CI/CD

Vanguard; Dallas (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Vanguard is seeking an Application Security Specialist to strengthen the secure SDLC across development teams. You will implement security controls, lead testing programs for APIs, containers, and applications, and collaborate with engineers to integrate best practices into CI/CD pipelines.

You will drive security maturity by reporting metrics, creating standards, mentoring teams, and staying ahead of evolving threats and industry standards to protect Vanguard's software and clients.

Qualifications

• Undergraduate degree in a related field or equivalent experience.
• Experience deploying and operating DAST tools with CI/CD integration.
• Experience with SAST, SCA, IAST, RASP and other app security tools.
• Strong knowledge of development, build and deployment processes (IDE, repos, pipelines, cloud, containers, serverless).
• Familiarity with industry standards such as NIST, OWASP, and MITRE.
• Relevant certifications in application development, security, DevSecOps, or cloud are a plus.

Responsibilities

• Guide Application Security strategy and secure the SDLC.
• Drive API, Container, and Application Security testing initiatives, including DAST.
• Develop strategies to secure containers, serverless, API, and AI/ML technologies.
• Provide hands‑on engineering support for security incidents and vulnerability management.
• Gather and report metrics on security coverage and program maturity.
• Create and maintain technical standards and procedures for Application Security services.
• Mentor development and cloud engineering teams on secure development practices.
• Implement, optimize, and operationalize Application Security solutions to improve risk visibility.
• Drive automation and security capabilities to improve developer experience and security processes.
• Stay informed on emerging Application Security trends and best practices.

Skills

DAST tooling

SAST

SCA

IAST

RASP

CI/CD integration

NIST familiarity

OWASP familiarity

MITRE familiarity

Education

Undergraduate degree

Relevant certifications in security/DevSecOps/cloud

Tools

CI/CD platforms

Cloud platforms

Job description

Vanguard is seeking an Application Security Specialist to strengthen the secure SDLC across development teams. You will implement security controls, lead testing programs for APIs, containers, and applications, and collaborate with engineers to integrate best practices into CI/CD pipelines.

You will drive security maturity by reporting metrics, creating standards, mentoring teams, and staying ahead of evolving threats and industry standards to protect Vanguard's software and clients.