Senior DevSecOps Architect for Secure Software Delivery

Direct Supply; Milwaukee (WI); Presencial; USD 170 000 - 210 000; Tempo integral

Resumo da oferta

Direct Supply seeks a Principal Cyber Security Engineer to lead DevSecOps, embedding security across the software lifecycle and guiding architecture, tooling and automation. This role partners with engineering and security teams to reduce risk and accelerate secure software delivery.

The candidate will define strategic security standards, drive secure coding practices, and mentor teams while ensuring measurable improvements in security coverage and risk-based releases.

Qualificações

• Bachelor's degree in Computer Science, Engineering, Information Security or related field.
• 10+ years of progressive information security/engineering/DevSecOps leadership.
• Deep expertise across SDLC including secure architecture, app security, automated testing, cloud security and production ops.
• Hands-on security automation design, CI/CD tooling integration and securing cloud-native apps, containers and infra.
• Proven ability to define DevSecOps roadmaps, standards and capabilities that improve engineering practices and reduce risk.
• Strong knowledge of software supply chain security, threat modeling and risk-based controls.
• Ability to resolve complex security challenges, influence across teams and communicate risks clearly.

Responsabilidades

• Lead DevSecOps strategy, roadmaps and priorities to strengthen software security and developer efficiency.
• Define secure architecture standards and reusable security patterns, advancing threat modeling.
• Embed security into development with secure coding, guidance, secrets detection and automation.
• Integrate SAST, SCA, DAST and IaC scanning into CI/CD to improve vulnerability detection.
• Strengthen supply chain security through controls for builds, repositories and access management.
• Design cloud and infrastructure security configurations and automated controls across environments.
• Prioritize vulnerabilities with engineering and operations to reduce exposure.
• Collaborate with security operations on logging, monitoring and incident response enhancements.
• Establish metrics to demonstrate DevSecOps effectiveness and guide priorities.
• Mentor engineers and security champions to improve secure engineering adoption.

Conhecimentos

Security leadership

DevSecOps

Cloud security

Threat modeling

Vulnerability management

Automation

CI/CD pipelines

SAST

SCA

DAST

IaC scanning

Formação académica

Bachelor's degree

Ferramentas

SAST tools

SCA tools

DAST tools

IaC security scanning

Descrição da oferta de emprego

Direct Supply seeks a Principal Cyber Security Engineer to lead DevSecOps, embedding security across the software lifecycle and guiding architecture, tooling and automation. This role partners with engineering and security teams to reduce risk and accelerate secure software delivery.

The candidate will define strategic security standards, drive secure coding practices, and mentor teams while ensuring measurable improvements in security coverage and risk-based releases.