Offensive Security Engineer, Specialist
vanguardCharlotte (NC)
Offensive Security Engineer, Specialist
Posted today
vanguardCharlotte (NC)
SENIORITY
Senior
About the role
What You'll Do:
- Design, build, and maintain offensive security platforms and cloud environments.
- Engineer primarily in Microsoft Azure, with additional support across AWS.Develop Infrastructure-as-Code using Terraform, Bicep/ARM, Cloud
- Formation, or similar tools.
- Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
- Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
- Deploy and integrate security tooling used for offensive testing, research, and automation.
- Implement cloud security controls, access management, monitoring, logging, and platform hardening.
- Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.
Required Qualifications:
5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
Strong hands-on experience designing and operating Microsoft Azure environments.
Working knowledge of AWS services, networking, IAM, and security concepts.
Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
Experience with Git-based development practices and CI/CD pipelines.
Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
Familiarity with Docker, Kubernetes, or other container technologies.
Preferred Qualifications:
Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
Experience building security labs, cyber ranges, or isolated testing environments.
Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
Experience developing internal platforms, APIs, or self-service capabilities.
Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
Experience with AI-enabled security automation.
Relevant Azure, AWS, Terraform, or security certifications.
Special Factors: SponsorshipVanguard is not offering visa sponsorship for this position.
About Vanguard:
At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work:
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
Summary
Location: Malvern, PA; Charlotte, NC; Dallas/Ft. Worth, TX
Type: Full time
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.