DevSecOps Specialist

Responsibilities

• Implement and operate enterprise secrets scanning solutions such as GHAS and Wiz
• Integrate secrets detection into CI/CD pipelines and PR workflows
• Configure detection rules, patterns, and policy thresholds to reduce noise
• Identify, triage, and prioritize exposed secrets across repositories and platforms
• Drive remediation with engineering teams to revoke, rotate, and remove exposed secrets
• Build automation for secrets detection, alerting, and response workflows
• Maintain monitoring, alerting, and operational health of secrets platforms
• Partner with IAM, pipeline, and AppSec teams for credential lifecycle governance
• Improve developer experience by providing clear remediation guidance and minimizing friction

Requirements

• Minimum four years of related work experience
• Undergraduate degree in a related field or an equivalent combination of training and experience
• Experience in IT security or application development is preferred

Preferred Qualifications

• Relevant security certifications such as CISSP, GSEC, GPEN, GWPN, or CEH

Benefits

• Financial wellness programs and competitive compensation
• Physical wellness support including medical coverage and fitness resources
• Personal wellness resources and generous paid time off
• Continuous learning and development opportunities, including educational assistance and mentoring

About the Company

Vanguard is on a mission to work for the long-term financial wellbeing of our clients. We lead through products and services that transform lives, fostering a highly collaborative and mission-driven culture.