Senior Application Security Engineer

- Utilize application development, deployment, and security experience to help guide Application Security strategy and secure the software development lifecycle (SDLC)

- Drive API, Container, and Application Security testing initiatives, including DAST and other security validation capabilities, to improve security coverage, identify vulnerabilities, and support timely remediation.

- Develop strategies to secure current and emerging technologies (containers, serverless, API, AI/ML).

- Provide hands-on engineering support for security incidents, threat events, vulnerability management, and control improvements to strengthen Enterprise application security posture.

- Gather and report metrics from Application Security solutions and processes to provide meaningful insights into security coverage, risk reduction, and program maturity.

- Create and maintain technical standards, operational procedures, and supporting documentation for Application Security services by leveraging guidance from organizations such as NIST, OWASP, and SANS.

- Provide technical mentorship and training to development and cloud engineering teams on secure development practices for API, Container security, and vulnerability remediation.

- Implement, optimize, and operationalize Application Security solutions to improve risk visibility, security coverage, and developer adoption.

- Drive automation and security capabilities that improve developer experience, streamline security processes, and align Application Security solutions with enterprise security and technology goals.

- Stay informed on emerging Application Security trends, technologies, attack techniques, and industry best practices to continuously enhance Vanguard's security posture.

- Undergraduate degree in a related field or equivalent combination of training and experience.

- Strong experience deploying and operating DAST tools to include managing team onboarding, authentication setup, and CI/CD integration.

- Experience with other well-known application security tools (SAST, SCA, IAST, RASP, etc.)

- Strong knowledge of application development, build, and deployment processes (development, IDEs, repositories, branching, pipelines, cloud, containers, serverless, etc.).

- Familiarity with industry standards such as NIST, OWASP, and MITRE.

- Relevant certifications in application development, security, application security, DevSecOps, or cloud are a plus.

Vanguard is not offering visa sponsorship for this position.

Sponsorship Vanguard is not offering visa sponsorship for this position.

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team.

From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.