<p>Provides advanced application and product security expertise by designing, developing, and integrating security features into systems, applications, and solutions. Ensures product security is maintained throughout the product lifecycle by embedding security controls, performing security assessments, and integrating new security features and updates into existing products. Works under general direction and serves as a technical partner to product and engineering teams to strengthen security posture while enabling business objectives.</p> <p>Core Responsibilities</p> <ul> <li>Secure the software development lifecycle (SDLC) by applying application development, deployment, and security expertise. </li><li>Operate, configure, and continuously improve application security tooling, with a primary focus on SAST and SCA, including policy tuning and integration into CI/CD pipelines. </li><li>Identify, analyze, and triage application security vulnerabilities; apply risk-based prioritization and work with engineering teams to drive timely remediation. </li><li>Collaborate with App Sec engineers and peer security teams to ensure consistent implementation, coverage, and alignment of application security tools, standards, and processes. </li><li>Champion a low-friction developer experience by streamlining scan workflows, reducing false positives, and providing clear, actionable feedback. </li><li>Participate in an on-call rotation to support application security tooling, assist developers, and respond to security threat events when required. </li><li>Identify and implement opportunities to automate application security processes to improve scalability, efficiency, and coverage. </li><li>Gather and report meaningful metrics to measure vulnerability trends, tool effectiveness, and application security program maturity. </li><li>Develop and maintain documentation for application security technologies, processes, and standards. </li><li>Provide guidance and training to development and cloud engineering teams on secure coding, dependency management, and deployment best practices. </li><li>Stay current on application security trends, tools, and standards, and contribute to continuous improvement of the AppSec program. </li><li>Participate in special projects and perform other duties as assigned. </li></ul> <p>Qualifications</p> <ul> <li>Minimum of five years related work experience. </li><li>Undergraduate degree in a related field or the equivalent combination of training and experience. </li></ul> <p>Special Factors</p> <p>Sponsorship</p> <p>Vanguard is offering visa sponsorship for this position.</p> <p>About Vanguard</p> <p>At Vanguard, we don't just have a mission-we're on a mission.</p> <p>To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p> <p>How We Work</p> <p>Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p>