Senior Cloud Penetration Tester – Multi-Cloud Security Lead

Vanguard Group; Malvern (Chester County); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Vanguard seeks a senior cloud penetration tester to lead security assessments across multi-cloud environments and cloud-hosted applications. You will conduct both manual and automated testing to uncover vulnerabilities, misconfigurations, IAM weaknesses, and privilege-escalation paths, delivering detailed reports to technical teams and leadership.

You will drive the evolution of testing methodologies, tooling, and standards while researching emerging cloud threats and developing custom tools as

Qualifications

• Minimum ten years of related work experience with at least three in information security.
• Undergraduate degree in a related field or equivalent experience.
• Hands-on experience performing penetration testing across multiple cloud platforms.

Responsibilities

• Plan, lead, and conduct penetration tests across multi-cloud environments and cloud-hosted apps.
• Perform manual and automated testing to identify vulnerabilities, misconfigurations, IAM weaknesses, and cloud attack paths.
• Develop detailed assessment reports and present findings to technical teams and leadership; collaborate with IT sub-divisions, partners, and business units.
• Evolve cloud penetration testing methodologies, tooling, automation, standards, and best practices.
• Maintain subject matter expertise; research emerging cloud vulnerabilities and offensive security tooling.
• Evaluate and onboard new tooling and develop custom tools as needed.
• Participate in special projects and perform other duties as assigned.

Skills

Penetration testing

Cloud security

Threat modeling

Vulnerability documentation

Communication with teams

Education

Bachelor's degree or equivalent

Tools

Burp Suite

Pacu

Redboto

CloudBrute

ScoutSuite

Prowler

Job description

Vanguard seeks a senior cloud penetration tester to lead security assessments across multi-cloud environments and cloud-hosted applications. You will conduct both manual and automated testing to uncover vulnerabilities, misconfigurations, IAM weaknesses, and privilege-escalation paths, delivering detailed reports to technical teams and leadership.

You will drive the evolution of testing methodologies, tooling, and standards while researching emerging cloud threats and developing custom tools as