Senior Cyber Security Engineer - Vulnerability Lead

Direct Supply, Inc.; Milwaukee (WI); On-site; USD 120,000 - 160,000; Full time

Job summary

Direct Supply, Inc. is seeking a Senior Cyber Security Engineer to own vulnerability management and lead penetration testing across its technology environments. You will collaborate with engineering, operations and security teams to drive remediation, improve processes and strengthen security controls.

The role reports to the Director of Information Security and requires hands-on technical expertise with a focus on reducing exposure and delivering measurable improvements in security posture.

Qualifications

• 6+ years of progressive experience in information security or security engineering.

Responsibilities

• Own vulnerability management operations across infrastructure, cloud and applications.
• Analyze and prioritize security vulnerabilities by validating findings and assessing exploitability and business impact.
• Drive remediation by coordinating actions with engineering and operations teams.
• Automate scanning, ticketing and reporting workflows to improve efficiency.
• Plan and execute internal and external penetration testing and validate findings.
• Coordinate external penetration testing services and ensure coverage and quality.
• Retest fixes to confirm vulnerabilities are addressed.
• Analyze root causes and recommend practical security improvements.

Skills

Vulnerability management

Penetration testing

Security scanning platforms

Risk-based prioritization

Automation of security workflows

Security metrics reporting

Cloud and on-prem infrastructure

Education

Bachelor's degree in Computer Science or related field

Tools

Security platforms

Vulnerability scanning tools

Penetration testing tools

Job description

Direct Supply, Inc. is seeking a Senior Cyber Security Engineer to own vulnerability management and lead penetration testing across its technology environments. You will collaborate with engineering, operations and security teams to drive remediation, improve processes and strengthen security controls.

The role reports to the Director of Information Security and requires hands-on technical expertise with a focus on reducing exposure and delivering measurable improvements in security posture.