Sr Security Platform Engineer, AI and Automation

The Vanguard Group•Charlotte, NC

1d•Hybrid

About The Position

Global Enterprise Security (GES) partners with Vanguard’s lines of business to protect crew and client information and assets. Within GES, Attack Surface Reduction identifies, prioritizes, and manages vulnerabilities and configuration issues across the organization. DevSecOps enhances application security by automating security processes that help developers find and fix vulnerabilities earlier in the software development lifecycle (SDLC). This role is part of the team responsible for orchestrating and enforcing security scanning capabilities, including SAST, SCA, container scanning, and API security scanning. The team builds the platform that runs scans across Vanguard’s pipelines and enforces security policies, and is extending that platform with AI capabilities to analyze findings and recommend remediation. The engineer works with team engineers, architects, Security Architecture and Engineering (SAEP), AI, Data and Platform Technology (ADAPT), IAM, Technical Security Advisors, and teams across Attack Surface Reduction. The role leads the design and implementation of secure, cloud-native platform services on AWS; integrates security scanners and findings into SDLC pipelines; and advances agentic AI vulnerability analysis and remediation from proof of concept to production. It also provides technical leadership in AI-enabled application security, platform reliability, engineering standards, and operational excellence.

Requirements

12+ years of experience in software engineering, application development, or platform engineering, including 8+ years of hands-on software development experience.
Undergraduate degree or an equivalent combination of relevant education, training, and experience.
Strong expertise in AWS cloud technologies and cloud-native application and platform architectures.
Strong software engineering and programming fundamentals, with the ability to work effectively across multiple programming languages.
Hands-on experience building agentic AI solutions, including multi-step, tool-using agents integrated into production systems.
Experience integrating large language models (LLMs) into production applications, including prompt design, tool/function calling, context management, cost optimization, and latency management.
Practical experience evaluating the quality and reliability of AI-generated output, including establishing release criteria and identifying degradation after deployment.
Experience designing and implementing APIs, distributed systems, automation solutions, and CI/CD pipelines.
Experience operating production platform services, including applying observability, reliability, and operational engineering practices.
Demonstrated ability to lead complex technical initiatives, collaborate and influence across organizational boundaries, and mentor engineers.
Ability and willingness to learn and apply new technologies as platforms, AI capabilities, and security requirements evolve.

Nice To Haves

Graduate degree.
Python experience, particularly for AI and large language model development; current technologies include Node.js and TypeScript.
Experience with Amazon Bedrock, including model selection, guardrails, and evaluating trade-offs among hosted models.
Experience in application security, DevSecOps, or secure software development, including commercial security scanning platforms such as Snyk, Wiz, or JFrog Xray.
Experience building automated code remediation or developer-facing security tooling, particularly where accuracy and false-positive management are critical to developer adoption.
Experience partnering with enterprise AI and data platform teams to use shared AI services while aligning with organizational standards for model access and data handling.
Experience in platform engineering, DevOps, or CI/CD engineering, including building services and pipelines used by application and product teams across an enterprise.
Experience designing and delivering enterprise-scale automation solutions adopted by multiple teams.
AWS certifications such as AWS Certified Solutions Architect - Associate or Professional, AWS Certified DevOps Engineer - Professional, or AWS Certified Machine Learning Engineer - Associate.
Demonstrated applied AI engineering experience through production AI systems, open-source contributions, or published work; practical experience is valued over certification alone.

Responsibilities

Lead the design, development, and implementation of secure, cloud-native platform services on AWS.
Integrate application security tools and scanning capabilities into SDLC pipelines, including onboarding scanners, normalizing findings, and translating results into enforceable security controls.
Partner with the tech lead and architects on the technical direction for AI scanning capabilities and the AppSec AI Harness, advancing agentic vulnerability analysis and remediation from proof of concept to a supported production capability.
Design integration patterns between AI capabilities and the security orchestration platform, including security-finding ingestion, validation of AI-generated remediation, and measurement of output quality as models and prompts evolve.
Integrate AI capabilities into the broader platform architecture, engineering standards, and delivery roadmap in partnership with technical leads and architects.
Serve as a technical subject matter expert for AI-enabled application security and establish practical approaches for applying AI to DevSecOps security challenges.
Design and develop APIs, event-driven integrations, automation services, and CI/CD capabilities that enable reliable, scalable security testing and simplify adoption for development teams.
Improve the reliability and scalability of the orchestration platform and AI capabilities through automation, observability, and self-service capabilities.
Collaborate with security and engineering teams to embed secure development practices throughout the development lifecycle, including SAST, SCA, container security, and API security testing.
Provide technical leadership and mentorship, promoting high-quality software engineering practices and strengthening team capabilities in AI, application security, and platform engineering.
Partner with stakeholders to establish technical direction, manage technical risks, and deliver business-critical solutions, including determining where AI provides meaningful value in application security.
Collaborate with DevSecOps leaders to align engineering priorities and deliverables with strategic initiatives as business and technology needs evolve.
Drive continuous improvement across platform architecture, engineering standards, security practices, and operational excellence.