Offensive Security Engineer, Specialist

What You'll Do

• •Design, build, and maintain offensive security platforms and cloud environments.
• •Engineer primarily in Microsoft Azure , with additional support across AWS .
• •Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation , or similar tools.
• •Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go , or similar languages.
• •Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
• •Deploy and integrate security tooling used for offensive testing, research, and automation.
• •Implement cloud security controls, access management, monitoring, logging, and platform hardening.
• •Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.

Required Qualifications

• •5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
• •Strong hands-on experience designing and operating Microsoft Azure environments.
• •Working knowledge of AWS services, networking, IAM, and security concepts.
• •Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
• •Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
• •Experience with Git-based development practices and CI/CD pipelines.
• •Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
• •Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
• •Familiarity with Docker, Kubernetes, or other container technologies.

Preferred Qualifications

• •Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
• •Experience building security labs, cyber ranges, or isolated testing environments.
• •Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
• •Experience developing internal platforms, APIs, or self-service capabilities.
• •Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
• •Experience with AI-enabled security automation.
• •Relevant Azure, AWS, Terraform, or security certifications.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.