Vanguard Security Team

Security at Vanguard

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Vanguard's AppSec philosophy is centered on 'frictionless developer experience' and 'shift-left' practices.
The team views security as an enabler rather than a gatekeeper, aiming to streamline scan workflows to minimize disruption to development.
Their mission is to provide the solutions and processes that secure applications and operations globally.
They emphasize early engagement through threat modeling and the proactive identification of security gaps across all code repositories.

The team

Vanguard's Application Security team operates within the Enterprise Security and Fraud (ES&F) sub-division, which is part of the larger Global Risk & Security (GR&S) organization. The team includes roles such as Senior Application Security Specialists and Application Security Coordinators. The ES&F division is tasked with the global protection of Vanguard crew, property, data, and client assets. While specific headcount is not publicly available, the team utilizes a 'security orchestration' model to integrate tools into development pipelines.

What they're working on

Current AppSec initiatives at Vanguard include driving maximum scan coverage across all repositories to identify security gaps and orchestrating threat modeling activities across application and infrastructure teams. The team is also focused on aligning threat modeling outcomes with broader enterprise risk registers and ensuring that security assessments meet defined SLAs and quality standards.
A key operational initiative is the integration of security tooling directly into CI/CD pipelines to automate the vulnerability management process.