Senior Software Security Architect

Direct Supply, Inc.; Milwaukee (WI); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Generous benefit package available

Job summary

Direct Supply, Inc. is seeking a Principal Cyber Security Engineer to lead DevSecOps, embedding security across the software lifecycle and shaping secure architectures.

You will drive automation, threat modeling, and secure release practices in a collaborative, cross-functional environment. You will mentor engineers, guide security champions, and partner with engineering and operations to strengthen defenses and measurable security improvements.

Qualifications

• Bachelor's degree in CS, Engineering, Info Security or related field.
• 10+ years of progressive information security or DevSecOps leadership.
• Deep expertise across SDLC including secure architecture and cloud security.
• Hands-on security automation and CI/CD tool integrations.
• Certificates: CISSP, CCSP, GIAC or related; AI/ML security experience preferred.

Responsibilities

• Define and execute the DevSecOps strategy, roadmaps, and priorities.
• Establish secure architecture standards and reusable security patterns.
• Embed security into development with secure coding guidance and automation.
• Integrate SAST/DAST/SCA into CI/CD pipelines for proactive testing.
• Strengthen cloud and infrastructure security configurations and practices.
• Drive remediation and risk-based release decisions with teams.
• Collaborate with security operations on logging, monitoring, and incident response.
• Mentor engineers and guide security champions to improve adoption.
• Measure security coverage and control effectiveness to show value.

Skills

Security leadership

DevSecOps

Cloud security

Threat modeling

Automation

Secure SDLC

Vulnerability remediation

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Engineering, Information Security or a related field

Tools

SAST

SCA

DAST

IaC scanning

Job description

Direct Supply is building the future of healthcare technology with industry-leading products, solutions and platforms to help improve the lives of millions of seniors and those who care for them. The Principal Cyber Security Engineer provides technical leadership and strategic direction for Direct Supply's DevSecOps function, ensuring security is effectively integrated throughout the software development and delivery lifecycle. This role combines deep engineering expertise with ownership of DevSecOps capabilities, standards and technology to reduce security risk, improve development efficiency and enable secure, reliable software delivery. Reporting to the Director of Information Security, you'll serve as a principal technical contributor, partnering across engineering, technology and security teams to shape secure architectures, advance automation and deliver measurable security improvements. You'll also provide technical guidance and limited supervisory support to strengthen DevSecOps capabilities across the organization.

What You'll Do and Impact

• Lead the DevSecOps function by defining and executing its technical strategy, roadmap and priorities to strengthen software security, improve engineering efficiency and align investments with business needs.
• Establish secure architecture and engineering standards by evaluating system designs, defining reusable security patterns and advancing threat modeling practices to reduce risk across applications and platforms.
• Embed security into software development by implementing secure coding practices, developer guidance, secrets detection and reusable automation to prevent vulnerabilities earlier in the development lifecycle.
• Engineer automated security testing by integrating static analysis (SAST), software composition analysis (SCA), dynamic testing (DAST) and infrastructure-as-code scanning into CI/CD pipelines to improve vulnerability detection and support risk-based releases.
• Strengthen software supply chain security by implementing controls for build pipelines, artifact repositories, access management, secrets protection and software integrity to reduce exposure across development and deployment processes.
• Design and implement cloud and infrastructure security capabilities by establishing secure configurations, deployment patterns and automated controls that improve security consistency across cloud, container and infrastructure environments.
• Drive remediation of application and platform security risks by partnering with engineering and operations teams to prioritize vulnerabilities, address recurring issues and verify corrective actions to reduce ongoing exposure.
• Integrate security into production operations by collaborating with security operations teams on logging, monitoring, detection and incident response improvements to strengthen resilience and prevent recurring security issues.
• Measure and improve DevSecOps effectiveness by establishing metrics for security coverage, tool adoption, remediation progress and control effectiveness to guide priorities and demonstrate measurable results.
• Build technical capability across teams by evaluating security technologies, mentoring engineers, guiding assigned resources and supporting security champions to improve adoption of secure engineering practices.

What You'll Bring

• Bachelor's degree in Computer Science, Engineering, Information Security or a related field.
• 10+ years of progressive experience in information security, software engineering, platform engineering or DevSecOps, including demonstrated technical leadership of complex security engineering initiatives.
• Deep expertise across the software development lifecycle, including secure architecture, application security, automated testing, build and release processes, cloud security and production operations.
• Hands-on experience designing and implementing security automation, integrating security testing tools into CI/CD pipelines and securing cloud-native applications, containers and infrastructure environments.
• Demonstrated experience establishing DevSecOps roadmaps, technical standards and security capabilities that improve engineering practices, reduce risk and deliver measurable business results.
• Strong knowledge of software supply chain security, secure development practices, threat modeling, vulnerability remediation and risk-based security controls.
• Ability to independently resolve complex technical challenges, evaluate security trade-offs and influence engineering decisions across multiple teams.
• Demonstrated ability to communicate complex security risks, guide technical teams, mentor engineers and coordinate cross-functional initiatives to deliver sustainable security improvements.
• CISSP, CCSP, GIAC or relevant cloud and DevSecOps certifications; experience securing AI/ML and generative AI solutions preferred.

Job to be performed in the location listed.

Generous benefit package available.

© 2013 to 2026 Direct Supply, Inc. All rights reserved.

Direct Supply delivers solution-driven platforms, products and services to help solve the toughest challenges facing Senior Living and Healthcare. For more than 35 years, we've grown consistently while expanding our offering of innovative solutions for virtually every critical area of senior health across the continuum of care. If you asked our 1,200+ Partners what separates Direct Supply from other applied technology companies, it's that we are 100% employee owned and driven to work with a purpose. Every day, we strive to honor our mission of enhancing the lives of millions of seniors and healthcare professionals in a results-oriented agile environment that gives our Partners the necessary tools and flexibility to truly bring what's next to Healthcare. Ready to make a difference?