Apply on Employer Site

Vanguard · 16 hours ago

Application Security Specialist

Malvern, PA

Full-time

Hybrid

Mid Level

Vanguard is a leading investment management company focused on the long-term financial wellbeing of its clients. The Application Security Specialist will play a pivotal role in ensuring the security and compliance of the software development lifecycle, developing strategies, implementing technology, and collaborating with developers to enhance security measures.

FinanceFinancial Services

No H1B

Responsibilities

Play a leading role in defining the vision, strategy, and roadmap for security orchestration, ensuring it evolves to meet enterprise security needs and developer expectations

Drive initiatives to achieve maximum scan coverage across repositories, proactively identifying gaps and implementing scalable solutions to close them

Develop strategies to secure current and emerging technologies (cloud, containers, serverless, mobile, AI/ML, etc.)

Champion a frictionless developer experience by streamlining scan workflows and integrating feedback loops to continuously improve usability

Partner with the broader security organization to align our security orchestration capabilities with organizational goals, ensuring seamless integration in the CI/CD pipeline

Actively participate in epic/story grooming and retrospectives. Contribute to code reviews, complete development stories, and help evolve the team’s technical capabilities through hands-on collaboration and coding

Gather and report metrics from application security solutions and processes to provide meaningful insights into the maturity of the Application Security program

Stay up to date on application security practices and standards; participate in educational opportunities; read professional publications

Qualification

Application security toolsApplication development processesModern programming languageIndustry standards knowledgeRelevant certifications

Required

Undergraduate degree in a related field or equivalent combination of training and experience

Experience with well-known application security tools (SAST, SCA, IAST, RASP, etc.)

Strong knowledge of application development, build, and deployment processes (development, IDEs, repositories, branching, pipelines, cloud, containers, serverless, etc.)

Strong experience with any modern programming language

Familiarity with industry standards such as NIST, OWASP, and MITRE