Application Security, Specialist

Application Security, Specialist

Apply (https://vanguard.wd5.myworkdayjobs.com/en-US/vanguard\_external/job/Malvern-PA/Application-Security--Specialist\_182582-1/apply)

locations

Malvern, PA

Charlotte, NC

Dallas/Ft. Worth, TX

time type

Full time

posted on

job requisition id

182582

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Core Responsibilities

• Help define and implement Application Security strategy and secure SDLC practices across the organization.

• Partner with development teams to establish security requirements early in the software development lifecycle.

• Design and implement security controls and guardrails that support continuous and secure application delivery.

• Develop and maintain security standards and architecture patterns for APIs, cloud-native applications, containers, serverless platforms, and emerging technologies.

• Assess, prioritize, and drive remediation of application and infrastructure vulnerabilities identified through SAST, SCA, IAST, DAST, container, and cloud security solutions.

• Configure, integrate, and onboard teams to application security tools across CI/CD environments.

• Automate security processes and controls to improve efficiency, scalability, and developer adoption.

• Conduct security reviews, threat analysis, and risk assessments for new and existing applications.

• Partner with developers to identify root causes of vulnerabilities and provide remediation guidance.

• Ensure application security solutions are properly implemented, integrated, and delivering expected coverage.

• Develop security metrics, reporting, and dashboards to measure program effectiveness and maturity.

• Provide secure coding guidance, technical consultation, and training to development and cloud engineering teams.

• Maintain documentation for security controls, processes, standards, and operational procedures.

• Stay current with industry trends, emerging threats, and guidance from organizations such as OWASP, NIST, and SANS.

• Support enterprise application security standards, policies, and governance initiatives.

Qualifications

• Minimum of five years related work experience.

• Undergraduate degree in a related field or the equivalent combination of training and experience.

• Strong experience in Application Security, Secure SDLC, DevSecOps, or Software Engineering.

• Hands-on experience securing CI/CD pipelines and modern application development environments.

• Experience with application security technologies including SAST, SCA, IAST, DAST, API Security, and Container Security.

• Experience working with cloud platforms and cloud-native technologies.

• Strong understanding of secure coding principles, vulnerability management, and application risk assessment.

• Experience partnering with development teams to remediate security findings.

• Experience designing and implementing security automation solutions.

• Strong communication, collaboration, and problem-solving skills.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.