Senior DevSecOps Engineer, Application Security (Hybrid)

Vanguard; Town of Charlotte (NY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Vanguard is seeking an Application Security Specialist to strengthen the secure SDLC, guide strategy, and drive testing across APIs, containers, and applications. You will partner with developers to implement guardrails, reduce risk, and enhance security tooling adoption.

The role emphasizes hands-on security engineering, incident support, and mentoring for secure development practices while aligning with Vanguard's hybrid work model.

Qualifications

• Undergraduate degree or equivalent
• Experience deploying and operating DAST tools with CI/CD integration
• Experience with SAST, SCA, IAST, RASP, and other security tools
• Knowledge of development, build, and deployment pipelines (cloud, containers, serverless)
• Familiarity with NIST, OWASP, MITRE standards
• Certifications in security/devsecops are a plus

Responsibilities

• Guide App Sec strategy and secure the SDLC
• Drive API, container, and App Sec testing including DAST
• Secure emerging tech (containers, serverless, API, AI/ML)
• Provide hands-on engineering support for incidents and vulnerability management
• Report metrics to show coverage, risk reduction, and maturity
• Create standards and procedures leveraging NIST/OWASP/SANS
• Mentor teams on secure development practices for API/Container security
• Implement and optimize App Sec solutions to improve risk visibility and adoption
• Drive automation to improve developer experience and security processes
• Stay informed on App Sec trends and best practices

Skills

CI/CD pipelines

Secure SDLC

Application security

NIST

OWASP

MITRE

DevSecOps

SAST

SCA

IAST

Education

Undergraduate degree

Tools

DAST tools

SAST

SCA

IAST

RASP

Job description

Vanguard is seeking an Application Security Specialist to strengthen the secure SDLC, guide strategy, and drive testing across APIs, containers, and applications. You will partner with developers to implement guardrails, reduce risk, and enhance security tooling adoption.

The role emphasizes hands-on security engineering, incident support, and mentoring for secure development practices while aligning with Vanguard's hybrid work model.