Offensive Security Engineer, Specialist — Philadelphia

What You'll Do • Design, build, and maintain offensive security platforms and cloud environments. • Engineer primarily in Microsoft Azure , with additional support across AWS . • Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation , or similar tools. • Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go , or similar languages. • Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns. • Deploy and integrate security tooling used for offensive testing, research, and automation. • Implement cloud security controls, access management, monitoring, logging, and platform hardening. • Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations. Required Qualifications • 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field. • Strong hands-on experience designing and operating Microsoft Azure environments. • Working knowledge of AWS services, networking, IAM, and security concepts. • Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM. • Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages. • Experience with Git-based development practices and CI/CD pipelines. • Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls. • Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals. • Familiarity with Docker, Kubernetes, or other container technologies. Preferred Qualifications • Experience supporting Red Team, Purple Team, penetration testing, or security research functions. • Experience building security labs, cyber ranges, or isolated testing environments. • Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms. • Experience developing internal platforms, APIs, or self-service capabilities. • Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities. • Experience with AI-enabled security automation. • Relevant Azure, AWS, Terraform, or security certifications. Special Factors Sponsorship Vanguard is not offering visa sponsorship for this position. About Vanguard At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.