Application Threat Modeler, Senior Analyst

Vanguard • Malvern, PA

2d • Hybrid

About The Position

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape. Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Requirements

• Minimum of three years related work experience, with two years of Cyber Security experience.
• Undergraduate degree in Computer science, Management of Information Systems Security, or equivalent combination of training and experience.
• CISSP, AWS Cloud Practitioner, or other cloud or cloud platform equivalent required.

Responsibilities

• Provides senior level cyber security services to prevent, detect, respond to, and remediate threats. Coordinates with external and internal resources to develop and deliver new security solutions.
• Utilizes existing security controls to improve security posture, and researches emerging threats relevant to operations.
• Continually develops cloud architecture and security knowledge. Creates Standard Operating Procedures (SOPs) for incident response triage.
• Assists with the design and implementation of cyber security and operations procedures, tasks, and reports. Assists with automation of redundant processes.
• Provides incident response triage support to other Cyber Security Operations teams.
• Participates in special projects and performs other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees