DevSecOps SCA Tech Lead

Vanguard

Technical Lead for Software Composition Analysis at Vanguard, driving open-source security across the SDLC. Leading design, configuration, and optimization of SCA tooling while mentoring teams.

Posted 4/15/2026full-timeDallas • North Carolina, Pennsylvania, Texas • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Serve as the technical lead and subject matter expert for Software Composition Analysis (SCA)
Lead the design, configuration, and continuous optimization of SCA tooling
Drive risk-based vulnerability management for open-source dependencies
Define and maintain standards, guardrails, and best practices for open-source usage
Act as the primary point of contact for SCA
Participate in an on-call rotation to support application security tooling
Champion a developer-first experience
Identify, design, and implement automation and process improvements
Define, track, and communicate key metrics and insights related to open-source risk
Provide technical leadership and mentorship to App Sec engineers and development teams
Maintain comprehensive documentation for SCA technologies, processes, and standards

Requirements

What you’ll need

Bachelor’s degree in a related field or equivalent experience
Hands-on experience deploying and operating SCA/SAST tools
Experience with additional AppSec tools (Secret Scanning, IAST, DAST, etc.)
Strong understanding of modern application development and delivery (IDEs, repos, CI/CD, cloud, containers, serverless)
Working knowledge of NIST, OWASP, and MITRE frameworks
AppSec, DevSecOps, cloud, or development certifications a plus

Benefits

Comp & perks

Health insurance
Retirement plans
Paid time off
Flexible work arrangements
Professional development

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Software Composition AnalysisSAST toolsSecret ScanningIASTDASTautomationprocess improvementsapplication securitycloudcontainers

Soft Skills

technical leadershipmentorshipcommunicationrisk managementcollaborationproblem-solvingdocumentationoptimizationdeveloper-first experienceinsight tracking

Certifications

AppSec certificationsDevSecOps certificationscloud certificationsdevelopment certifications