Offensive Security Engineer, Specialist

About the job

What You'll Do

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure, with additional support across AWS.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Required Qualifications

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands-on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Preferred Qualifications

• Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• Experience building security labs, cyber ranges, or isolated testing environments.
• Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• Experience developing internal platforms, APIs, or self-service capabilities.
• Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• Experience with AI-enabled security automation.
• Relevant Azure, AWS, Terraform, or security certifications.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.