Skip to content

Open nowPosted today

Senior Software Security Architect

Direct Supply51 open roles

Where
Milwaukee WI
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Software Security ArchitectDirect Supply · Milwaukee WI
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Direct Supply's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market. Direct Supply postings stay open a median of 12 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted today

Direct Supply median: 12 days open

The posting

Direct Supply is building the future of healthcare technology with industry-leading products, solutions and platforms to help improve the lives of millions of seniors and those who care for them.

The Principal Cyber Security Engineer provides technical leadership and strategic direction for Direct Supply’s DevSecOps function, ensuring security is effectively integrated throughout the software development and delivery lifecycle. This role combines deep engineering expertise with ownership of DevSecOps capabilities, standards and technology to reduce security risk, improve development efficiency and enable secure, reliable software delivery.

Reporting to the Director of Information Security, you’ll serve as a principal technical contributor, partnering across engineering, technology and security teams to shape secure architectures, advance automation and deliver measurable security improvements. You’ll also provide technical guidance and limited supervisory support to strengthen DevSecOps capabilities across the organization.

What You’ll Do and Impact:

  • Lead the DevSecOps function by defining and executing its technical strategy, roadmap and priorities to strengthen software security, improve engineering efficiency and align investments with business needs.
  • Establish secure architecture and engineering standards by evaluating system designs, defining reusable security patterns and advancing threat modeling practices to reduce risk across applications and platforms.
  • Embed security into software development by implementing secure coding practices, developer guidance, secrets detection and reusable automation to prevent vulnerabilities earlier in the development lifecycle.
  • Engineer automated security testing by integrating static analysis (SAST), software composition analysis (SCA), dynamic testing (DAST) and infrastructure-as-code scanning into CI/CD pipelines to improve vulnerability detection and support risk-based releases.
  • Strengthen software supply chain security by implementing controls for build pipelines, artifact repositories, access management, secrets protection and software integrity to reduce exposure across development and deployment processes.
  • Design and implement cloud and infrastructure security capabilities by establishing secure configurations, deployment patterns and automated controls that improve security consistency across cloud, container and infrastructure environments.
  • Drive remediation of application and platform security risks by partnering with engineering and operations teams to prioritize vulnerabilities, address recurring issues and verify corrective actions to reduce ongoing exposure.
  • Integrate security into production operations by collaborating with security operations teams on logging, monitoring, detection and incident response improvements to strengthen resilience and prevent recurring security issues.
  • Measure and improve DevSecOps effectiveness by establishing metrics for security coverage, tool adoption, remediation progress and control effectiveness to guide priorities and demonstrate measurable results.
  • Build technical capability across teams by evaluating security technologies, mentoring engineers, guiding assigned resources and supporting security champions to improve adoption of secure engineering practices.

What You'll Bring:

  • Bachelor's degree in Computer Science, Engineering, Information Security or a related field.
  • 10+ years of progressive experience in information security, software engineering, platform engineering or DevSecOps, including demonstrated technical leadership of complex security engineering initiatives.
  • Deep expertise across the software development lifecycle, including secure architecture, application security, automated testing, build and release processes, cloud security and production operations.
  • Hands-on experience designing and implementing security automation, integrating security testing tools into CI/CD pipelines and securing cloud-native applications, containers and infrastructure environments.
  • Demonstrated experience establishing DevSecOps roadmaps, technical standards and security capabilities that improve engineering practices, reduce risk and deliver measurable business results.
  • Strong knowledge of software supply chain security, secure development practices, threat modeling, vulnerability remediation and risk-based security controls.
  • Ability to independently resolve complex technical challenges, evaluate security trade-offs and influence engineering decisions across multiple teams.
  • Demonstrated ability to communicate complex security risks, guide technical teams, mentor engineers and coordinate cross-functional initiatives to deliver sustainable security improvements.
  • CISSP, CCSP, GIAC or relevant cloud and DevSecOps certifications; experience securing AI/ML and generative AI solutions preferred.

Job to be performed in the location listed. Generous benefit package available.

© 2013 to 2026 Direct Supply, Inc. All rights reserved.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Direct Supply's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Direct Supply's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Direct Supply's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.