Senior Cloud Security Engineer: CSPM & IaC Automation

The Vanguard Group

Malvern (Chester County)

On-site

USD 120,000 - 160,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

The Vanguard Group is seeking a senior-level Cloud Security Engineer to enhance cloud security posture and drive automation across infrastructure, systems, and applications. You will implement CSPM tooling, shift‑left practices, and integrated security workflows in collaboration with Platform Engineering and DevOps teams.

Qualified candidates have 3+ years in cloud security and a Bachelor's degree or equivalent.

Qualifications

Minimum of 3+ years of experience in cloud security, vulnerability management, or security engineering.
Bachelor’s degree in a related field or equivalent combination of education and experience.

Responsibilities

Develop and maintain CSPM tooling, automation pipelines, and integrations to support vulnerability identification, prioritization, and remediation across cloud environments.
Engineer and operationalize cloud security posture controls, including preventative policies, build enforcement rules, and automated remediation workflows.
Build and maintain integrations between security platforms and enterprise systems (e.g., CI/CD pipelines, reporting tools) to enable self‑service capabilities and streamline exception management.
Configure and tune cloud security policies to ensure accurate and reliable assessment outcomes.
Analyze vulnerability and misconfiguration data to enhance risk scoring by incorporating exploit intelligence, environmental context, and threat signals.
Partner with Platform Engineering, DevOps, SRE, and application teams to implement shift‑left security practices and drive adoption of security tooling.
Contribute to Infrastructure‑as‑Code (IaC) reviews, ensuring security controls are embedded, version‑controlled, and enforced at deployment.
Support special projects, including AI‑assisted security tooling initiatives.