Senior DevSecOps Architect - Secure Cloud & Delivery

Direct Supply, Inc.; United States; Teletrabalho; USD 150 000 - 210 000; Tempo integral

Resumo da oferta

Direct Supply, Inc. seeks a Principal Cyber Security Engineer to provide technical leadership for the DevSecOps function, embedding security across the software development lifecycle and guiding security architecture, standards and automation.

You will partner with engineering and security teams to advance threat modeling, secure coding, automated testing (SAST/DAST/DAST), and secure cloud/container configurations, delivering measurable improvements and resilient software delivery.

Qualificações

• 10+ years of progressive information security or DevSecOps experience.
• Deep lifecycle security expertise: secure architecture, app security, automated testing, build/release, cloud security and production operations.
• Hands-on security automation; CI/CD tooling integration and secure cloud-native environments.

Responsabilidades

• Define the DevSecOps strategy and roadmap.
• Establish secure architecture and engineering standards.
• Embed security into software development with guidance and automation.
• Integrate SAST, SCA, DAST in CI/CD pipelines.
• Strengthen cloud, container and infrastructure security.
• Lead remediation and risk-based release decisions.
• Collaborate with security operations on logging and incident response.
• Measure DevSecOps effectiveness with security metrics.

Conhecimentos

Security leadership

DevSecOps expertise

Cloud security

Security automation

Threat modeling

CI/CD security

Communication skills

AI/ML security

Formação académica

Bachelor's degree in Computer Science, Engineering, Information Security or related field

Descrição da oferta de emprego

Direct Supply, Inc. seeks a Principal Cyber Security Engineer to provide technical leadership for the DevSecOps function, embedding security across the software development lifecycle and guiding security architecture, standards and automation.

You will partner with engineering and security teams to advance threat modeling, secure coding, automated testing (SAST/DAST/DAST), and secure cloud/container configurations, delivering measurable improvements and resilient software delivery.