Cloud Security Engineer

Vanguard•Malvern, PA

1d•Hybrid

About The Position

At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience. Vanguard, one of the world's largest investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests. This website uses "cookies" to distinguish you from other users. A cookie is a small file of letters and numbers placed on your computer or device. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site and services. The cookies are stored locally on your computer or mobile device. To accept cookies you can continue browsing as normal. Or you can go to our Privacy Policy to read more information and learn how to change your preferences.

Requirements

Undergraduate degree in a related field or equivalent combination of training and experience.
Strong experience with any modern programming language.
Strong knowledge of application development, build, and deployment processes.
Experience in one or more cloud providers and serverless platforms (preferably AWS).
Experience with well-known application security tools (SAST, SCA, IAST, RASP, etc).

Nice To Haves

Relevant certifications in application development, security, DevSecOps, or cloud are a plus.

Responsibilities

Participates in designing, testing, coding, and reviewing software throughout product life cycle.
Identifies opportunities for continuous quality improvement of technical standards, methodologies, and technologies.
Builds proactive monitoring and alerting into the Application Security tools and processes to minimize the downtime to the developer community.
Participates in on-call rotation.
Resolves technical problems discovered by internal clients.
Researches issues and performs root cause analysis.
Anticipates technology problems and prevents them.
Works closely with other Application Security teams and CTO to integrate existing and new security tools into CI/CD pipelines.
Works closely with other Application Security teams and leadership to bring application security scanning close to developers to enhance developer experience and increase productivity.
Identify opportunities to automate the Application Security processes and guide the team to improve efficiency and scalability.
Maintains a current and working knowledge of IT development methodology, architecture design, and technical standards. As new standards are instituted, ensures their usage by team members.
Mentors junior team members and identifies training needs.
Writes documentation, including technical and client documentation.
Participates in special projects and performs other duties as assigned.