Performs manual and AI-assisted secure code reviews across modern application stacks, validates automated vulnerability findings, and produces risk-based technical reports. Communicates remediation guidance to development teams and collaborates with penetration testers, threat modelers, and application security teams. Supports security methodologies, automation, prompt workflows, and initiatives addressing AI and LLM security risks.
Responsibilities:
- Performs manual and AI-assisted secure code reviews across modern application stacks, analyzing source code to identify vulnerabilities, logic flaws, and insecure coding practices.
- Utilizes established prompts, workflows, and review methodologies to support AI-assisted code review activities.
- Reviews and validates vulnerability findings identified through automated and AI-assisted analysis.
- Produces clear technical reports and risk-based recommendations.
- Works with development teams to communicate findings and support remediation efforts.
- Collaborates with penetration testers, threat modelers, and application security teams.
- Supports team processes, methodologies, and automation initiatives.
Qualifications:
- Minimum of 3 years of related work experience in application security, secure code review, or software engineering with a security focus.
- Understanding of secure coding principles, application security vulnerabilities (OWASP Top 10 and common application vulnerabilities), and secure software development practices.
- Familiarity with modern software architectures, APIs, cloud-native applications, and CI/CD pipelines.
- Familiarity with Java, C#, Python, JavaScript/TypeScript, Go, or similar languages.
- Familiarity with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube as well as familiarity with secure SDLC and DevSecOps practices
- Familiarity with generative AI or AI-assisted developer/security tools used in software development, code review, or security testing activities.
- Ability to communicate security findings and remediation guidance to developers and technical teams.
- Undergraduate degree in a related field or the equivalent combination of training and experience.
- Experience creating prompts, workflows, agents, or automations preferred
- Familiarity with LLM security risks, prompt injection, insecure code generation, model misuse, and AI application attack vectors preferred
- Familiarity with applications that utilize machine learning, generative AI, agentic AI, or AI-enabled business processes preferred
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
Vanguard Charlotte, North Carolina, USA Office
Two North Falls Plaza, Charlotte, NC, United States, 28217
Similar Jobs
Fintech
Performs manual and AI-assisted secure code reviews across modern application stacks, validates vulnerabilities, reduces false positives, and provides risk-based remediation guidance. Develops AI-assisted review prompts, workflows, and methodologies; collaborates with developers, penetration testers, threat modelers, and security teams; produces technical reports; and contributes to automation, secure SDLC, and DevSecOps initiatives.
Top Skills:
Agentic AiAPIsC#CheckmarxCi/CdCloud-Native ApplicationsDevsecopsFortifyGenerative AiGoJavaJavaScriptLarge Language ModelsMachine LearningOwasp Top 10Prompt EngineeringPythonSecure SdlcSemgrepSonarqubeTypescriptVeracode
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads, consults customers on insurance needs, recommends appropriate Property and Casualty coverage, and converts prospects into policyholders. The role includes paid training and licensing support, remote work, customer relationship building, sales closing, and adherence to assigned weekday and weekend schedules. Employees must maintain a dedicated home workspace and meet specified wired internet requirements.
Top Skills:
Cable InternetDsl InternetFiber InternetPcWired High-Speed Internet
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Supports procure-to-post expense operations through requisitioning, ordering, transaction processing, invoice workflows, exception resolution, mailbox and queue management, documentation, audits, and supplier or auction follow-up. The role provides ETA operational support, maintains accurate records, meets service levels, communicates with stakeholders, and may cross-train across broader purchasing and expense processes.
Top Skills:
ExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft WordOracle Financials
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
