Performs manual and AI-assisted secure code reviews across modern application stacks, validates vulnerabilities, reduces false positives, and provides risk-based remediation guidance. Develops AI-assisted review prompts, workflows, and methodologies; collaborates with developers, penetration testers, threat modelers, and security teams; produces technical reports; and contributes to automation, secure SDLC, and DevSecOps initiatives.
Responsibilities:
- Performs manual and AI-assisted secure code reviews across modern application stacks, analyzing source code to identify vulnerabilities, logic flaws, and insecure coding practices.
- Develops and optimizes prompts, workflows, and review methodologies that improve the effectiveness and repeatability of AI-assisted code review activities.
- Validates and refines vulnerability findings, reducing false positives and identifying overlooked risks.
- Produces clear technical reports and risk-based recommendations.
- Partners with development teams to explain findings, assess risk, and provide actionable remediation guidance.
- Collaborates with penetration testers, threat modelers, and application security teams.
- Contributes to team processes, methodologies, and automation initiatives.
Qualifications:
- Minimum of 5 years of related work experience in application security, secure code review, or software engineering with a security focus
- Strong understanding of secure coding principles, application security vulnerabilities (OWASP Top 10 and common application vulnerabilities), and secure software development practices
- Understanding of modern software architectures, APIs, cloud-native applications, and CI/CD pipelines
- Experience reviewing Java, C#, Python, JavaScript/TypeScript, Go, or similar languages
- Experience using SAST tools such as Checkmarx, Fortify, Veracode, Semgrep, or SonarQube as well as familiarity with secure SDLC and DevSecOps practices
- Hands-on experience using generative AI or AI-assisted developer/security tools as part of engineering, code review, security testing, or DevSecOps workflows
- Ability to communicate security findings and remediation guidance to developers and technical leadership
- Undergraduate degree in a related field or an equivalent combination of training and experience
- Experience creating prompts, workflows, agents, or automations preferred
- Experience leveraging large language models (LLMs) to improve security analysis, code review efficiency, vulnerability triage, or secure development workflows preferred
- Familiarity with LLM security risks, prompt injection, insecure code generation, model misuse, and AI application attack vectors preferred
- Experience reviewing applications that utilize machine learning, generative AI, agentic AI, or AI-enabled business processes preferred
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
Vanguard Charlotte, North Carolina, USA Office
Two North Falls Plaza, Charlotte, NC, United States, 28217
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads, consults customers on insurance needs, recommends appropriate Property and Casualty coverage, and converts prospects into policyholders. The role includes paid training and licensing support, remote work, customer relationship building, sales closing, and adherence to assigned weekday and weekend schedules. Employees must maintain a dedicated home workspace and meet specified wired internet requirements.
Top Skills:
Cable InternetDsl InternetFiber InternetPcWired High-Speed Internet
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Supports procure-to-post expense operations through requisitioning, ordering, transaction processing, invoice workflows, exception resolution, mailbox and queue management, documentation, audits, and supplier or auction follow-up. The role provides ETA operational support, maintains accurate records, meets service levels, communicates with stakeholders, and may cross-train across broader purchasing and expense processes.
Top Skills:
ExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft WordOracle Financials
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Supports procure-to-pay expense operations through requisitioning, ordering, transaction processing, invoice workflows, exception resolution, audit support, documentation, and shared mailbox management. The role initially supports ETA operations and communicates with auctions, suppliers, and internal stakeholders. Additional responsibilities may include purchasing support, data validation, ticket management, process documentation, cross-training, and special projects.
Top Skills:
ExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft WordOracle Financials
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
