Remote Security Architect — Vulnerability & AppSec Leader

OEConnection LLC; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

OEConnection LLC is seeking a hands-on Security Engineer to shape and execute a modern security vision. You will design, build, and scale a holistic vulnerability management and application security program across AWS, hybrid infrastructure, and modern developer pipelines.

Collaborate with Engineering and IT to embed security into software development, establish risk metrics, and deliver steady improvements without slowing velocity.

Qualifications

• Bachelor-level degree required or equivalent work experience in Cybersecurity/CS/IT.
• At least 6 years of hands-on cybersecurity experience with Senior/Lead Security Engineer or Security Architect roles.
• Experience operating in hybrid environments and deploying Terraform in production.

Responsibilities

• Build and manage a unified Vulnerability Management Lifecycle across AWS, on-premises, containers, and code.
• Define and report program metrics (MTTR, SLA, patch coverage) to leadership.
• Set remediation SLAs with Engineering, DevOps, and IT Operations.
• Embed SAST/DAST/SCA and secret-scanning into CI/CD pipelines and Terraform checks.
• Expand controls to cover open-source dependencies, code hygiene, and secure development.
• Design and maintain security architectures within AWS and IaC templates.
• Coordinate patch management across hybrid workloads.
• Track emerging threats and adjust remediation priorities accordingly.
• Coordinate external security assessments and post-remediation verification.

Skills

Cloud security

Terraform

SAST/DAST/ SCA

SIEM & SecOps

Threat monitoring

AWS security services

Security governance

Remediation leadership

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Terraform

Cloud security tooling

Job description

OEConnection LLC is seeking a hands-on Security Engineer to shape and execute a modern security vision. You will design, build, and scale a holistic vulnerability management and application security program across AWS, hybrid infrastructure, and modern developer pipelines.

Collaborate with Engineering and IT to embed security into software development, establish risk metrics, and deliver steady improvements without slowing velocity.