Apply Now

DevSecOps Tech Lead

• Posted 3 days ago • Updated 3 days ago

Full Time

On-site

Fitment

Dice Job Match Score™

⏳ Almost there, hang tight...

Job Details

Skills

Open Source
Risk Management
Software Development
Workflow
Security Controls
Bill Of Materials
Supply Chain Management
Impact Analysis
Version Control
Publishing
Regulatory Compliance
Leadership
Mentorship
DevOps
SCA
Onboarding
Application Development
Continuous Integration
Continuous Delivery
OWASP
DevSecOps
Cloud Computing
Finance
Collaboration

Summary

{"description": " Core Responsibilities

Lead the design and execution of enterprise-wide Software Composition Analysis (SCA) and software supply chain security strategy across all applications and platforms.
Own end-to-end open-source risk management, including vulnerability detection, prioritization, and remediation of third-party dependencies.
Define and enforce security policies aligned with industry standards such as OWASP and NIST (SSDF), ensuring secure software development practices.
Integrate SCA tooling into CI/CD pipelines and developer workflows to enable automated, shift-left security controls.
Drive implementation and adoption of Software Bill of Materials (SBOM) standards (e.g., Cyclone,DX, SPDX) for full dependency visibility.
Secure the software supply chain by implementing controls for artifact integrity, provenance, and signed builds, aligned with OpenSSF frameworks (e.g., SLSA).
Lead response and mitigation efforts for critical supply chain vulnerabilities (e.g., zero-day dependency risks), ensuring rapid impact analysis and remediation.
Establish governance over artifact repositories and package registries, enforcing version control, trusted sources, and secure publishing practices.
Define and track key security metrics (e.g., vulnerability MTTR, coverage, policy compliance) and present insights to senior leadership.
Mentor a team of security engineers while partnering with engineering, DevOps, and product teams to drive scalable, developer-friendly security solutions.

Qualifications

Bachelor's degree in a related field or equivalent experience
Hands-on experience deploying and operating SCA/SAST tools, including onboarding, auth setup, and CI/CD integration
Experience with additional AppSec tools (Secret Scanning, IAST, DAST, etc.)
Strong understanding of modern application development and delivery (IDEs, repos, CI/CD, cloud, containers, serverless)
Working knowledge of NIST, OWASP, and MITRE frameworks
AppSec, DevSecOps, cloud, or development certifications a plus

Special Factors

Sponsorship
Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.", "salary_raw": "Row(double=None, string=None)"}

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90922487
Position Id: 24203742
Posted 3 days ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Application Security Tech Lead

Malvern, Arkansas

•

2d ago

{"description": " Duties and Responsibilities: Provide technical and delivery leadership for the Application Security - DevSecOps Team, spanning API, DAST, container security, and emerging application security capabilities. Partner with individual domain leads (API, DAST, Container, etc.) to balance priorities, unblock work, and ensure consistent collaboration and execution across the team. Support the manager through execution, planning, stakeholder communication, and operational leadership;

Full-time

Application Security Engineer - Cloud Engineering

Malvern, Arkansas

•

2d ago

{"description": " Responsibilities: Design, implement, test, and maintain application security tooling and integrations across the software development lifecycle, with a focus on reliability, scalability, and performance. Build, enhance, and operate CI/CD pipeline integrations for application security scanning, ensuring consistent execution and minimal impact to developer workflows. Develop and maintain monitoring, alerting, and operational controls for application security platforms to ensure a

Full-time

Senior Application Security Specialist

Malvern, Arkansas

•

6d ago

{"description": " Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data,

Full-time

Sr Vulnerability Management Analyst

Malvern, Arkansas

•

2d ago

{"description": "We're excited for a Senior Vulnerability Management Analyst to join our high-energy team - to help shape the future of Vanguard's attack surface management and VulnOps. This role sits at the intersection of security risk, automation, and emerging AI - driven capabilities. If you're a cybersecurity professional who thrives on critical thinking, challenging yourself, and shaping how humans and machines work together to reduce risk - this role is for you! You'll be responsible for

Full-time

Search all similar jobs