Offensive Security Engineer, Specialist

Vanguard's Offensive Security & Fraud Testing (OSFT) team is looking for an Offensive Security Engineer to build and scale the cloud platforms, automation, and tooling that power our offensive security capabilities. This is an engineering-first role with an offensive security mission. You'll design, automate, secure, and operate the infrastructure used by Red Team, Purple Team, and security research teams across the enterprise. We're looking for a builder-someone who enjoys creating scalable, cloud-based solutions and turning complex security requirements into reliable, repeatable platforms.

What You'll Do

• Design, build, and maintain offensive security platforms and cloud environments.
• Engineer primarily in Microsoft Azure, with additional support across AWS.
• Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
• Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
• Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• Deploy and integrate security tooling used for offensive testing, research, and automation.
• Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Required Qualifications

• 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong hands-on experience designing and operating Microsoft Azure environments.
• Working knowledge of AWS services, networking, IAM, and security concepts.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• Experience with Git-based development practices and CI/CD pipelines.
• Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• Familiarity with Docker, Kubernetes, or other container technologies.

Preferred Qualifications

• Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• Experience building security labs, cyber ranges, or isolated testing environments.
• Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• Experience developing internal platforms, APIs, or self-service capabilities.
• Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• Experience with AI-enabled security automation.
• Relevant Azure, AWS, Terraform, or security certifications.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.