Application Security Specialist

Salary: $120,000 - 160,000 per year Requirements: At least five years of related work experience. An undergraduate degree in a related field, or an equivalent combination of training and experience. Strong experience in Application Security, Secure SDLC, DevSecOps, or Software Engineering. Hands-on experience securing CI/CD pipelines and modern application development environments. Experience with application security technologies, including SAST, SCA, IAST, DAST, API Security, and Container Security. Experience with cloud platforms and cloud-native technologies. Strong understanding of secure coding principles, vulnerability management, and application risk assessment. Experience partnering with development teams to remediate security findings. Experience designing and implementing security automation solutions. Strong communication, collaboration, and problem-solving skills. Visa sponsorship is not available for this position. Responsibilities: Help shape and implement our Application Security strategy and secure SDLC practices across the organization. Partner with development teams to establish security requirements early in the software development lifecycle. Design and implement security controls and guardrails that enable continuous, secure application delivery. Develop and maintain security standards and architecture patterns for APIs, cloud-native applications, containers, serverless platforms, and emerging technologies. Assess, prioritize, and drive remediation of application and infrastructure vulnerabilities identified through SAST, SCA, IAST, DAST, container, and cloud security solutions. Configure and integrate application security tools across CI/CD environments and onboard teams to them. Automate security processes and controls to improve efficiency, scalability, and developer adoption. Conduct security reviews, threat analyses, and risk assessments for new and existing applications. Work with developers to identify vulnerability root causes and provide remediation guidance. Ensure application security solutions are properly implemented and integrated, and provide expected coverage. Develop security metrics, reports, and dashboards to measure program effectiveness and maturity. Provide secure coding guidance, technical consultation, and training to development and cloud engineering teams. Maintain documentation for security controls, processes, standards, and operational procedures. Keep current with industry trends, emerging threats, and guidance from organizations such as OWASP, NIST, and SANS. Support enterprise application security standards, policies, and governance initiatives. Technologies: API CI/CD Cloud DevSecOps Support OWASP Security Serverless More: Hackajob is collaborating with Vanguard to connect exceptional professionals with this Application Security Specialist role. Our Global Risk and Security organization supports business strategy, protects our clients and Vanguards interests, and promotes informed risk decisions. Within it, Enterprise Security and Fraud protects our people, property, data, and client assets, bringing together engaged, diverse professionals who continue to develop in a changing security landscape. We offer comprehensive health and wellness care, work-life balance, and investment in your future. Our mission is to support clients long-term financial wellbeing and provide products and services that transform their lives. Most crew members work in a hybrid model that combines flexibility with in-person learning, collaboration, and connection. last updated 40 week of 2026