Offensive Security Engineer, Specialist

Vanguard • Malvern, PA

1d • Hybrid

About The Position

Design, build, and maintain offensive security platforms and cloud environments, primarily in Microsoft Azure with additional support across AWS. Develop infrastructure as code, automate provisioning and lifecycle management, build CI/CD pipelines and containerized solutions, and deploy security tooling for offensive testing, research, and automation. Implement cloud security controls and collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Vanguard describes its mission as supporting clients’ long-term financial wellbeing and leading through products and services that transform clients’ lives. The company uses a hybrid working model for the majority of crew members, combining flexibility with in-person learning, collaboration, and connection. Vanguard is not offering visa sponsorship for this position.

Requirements

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands-on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Nice To Haves

• Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• Experience building security labs, cyber ranges, or isolated testing environments.
• Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• Experience developing internal platforms, APIs, or self-service capabilities.
• Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• Experience with AI-enabled security automation.
• Relevant Azure, AWS, Terraform, or security certifications.

Responsibilities

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure, with additional support across AWS.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed