{"id":3423732,"url":"https://alion.io/job/direct-supply-senior-software-security-architect","title":"Senior Software Security Architect","company":{"id":2242045,"name":"Direct Supply","domain":"directsupply.com","url":"https://alion.io/company/directsupply","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Milwaukee, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":128000,"max_usd":254000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-28T21:41:44Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-01T09:42:11Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Direct Supply is building the future of healthcare technology with industry-leading products, solutions and platforms to help improve the lives of millions of seniors and those who care for them.\nThe Principal Cyber Security Engineer provides technical leadership and strategic direction for Direct Supply’s DevSecOps function, ensuring security is effectively integrated throughout the software development and delivery lifecycle. This role combines deep engineering expertise with ownership of DevSecOps capabilities, standards and technology to reduce security risk, improve development efficiency and enable secure, reliable software delivery.\nReporting to the Director of Information Security, you’ll serve as a principal technical contributor, partnering across engineering, technology and security teams to shape secure architectures, advance automation and deliver measurable security improvements. You’ll also provide technical guidance and limited supervisory support to strengthen DevSecOps capabilities across the organization.\nWhat You’ll Do and Impact:\nLead the DevSecOps function by defining and executing its technical strategy, roadmap and priorities to strengthen software security, improve engineering efficiency and align investments with business needs.\nEstablish secure architecture and engineering standards by evaluating system designs, defining reusable security patterns and advancing threat modeling practices to reduce risk across applications and platforms.\nEmbed security into software development by implementing secure coding practices, developer guidance, secrets detection and reusable automation to prevent vulnerabilities earlier in the development lifecycle.\nEngineer automated security testing by integrating static analysis (SAST), software composition analysis (SCA), dynamic testing (DAST) and infrastructure-as-code scanning into CI/CD pipelines to improve vulnerability detection and support risk-based releases.\nStrengthen software supply chain security by implementing controls for build pipelines, artifact repositories, access management, secrets protection and software integrity to reduce exposure across development and deployment processes.\nDesign and implement cloud and infrastructure security capabilities by establishing secure configurations, deployment patterns and automated controls that improve security consistency across cloud, container and infrastructure environments.\nDrive remediation of application and platform security risks by partnering with engineering and operations teams to prioritize vulnerabilities, address recurring issues and verify corrective actions to reduce ongoing exposure.\nIntegrate security into production operations by collaborating with security operations teams on logging, monitoring, detection and incident response improvements to strengthen resilience and prevent recurring security issues.\nMeasure and improve DevSecOps effectiveness by establishing metrics for security coverage, tool adoption, remediation progress and control effectiveness to guide priorities and demonstrate measurable results.\nBuild technical capability across teams by evaluating security technologies, mentoring engineers, guiding assigned resources and supporting security champions to improve adoption of secure engineering practices.\nWhat You'll Bring:\nBachelor's degree in Computer Science, Engineering, Information Security or a related field.\n10+ years of progressive experience in information security, software engineering, platform engineering or DevSecOps, including demonstrated technical leadership of complex security engineering initiatives.\nDeep expertise across the software development lifecycle, including secure architecture, application security, automated testing, build and release processes, cloud security and production operations.\nHands-on experience designing and implementing security automation, integrating security testing tools into CI/CD pipelines and securing cloud-native applications, containers and infrastructure environments.\nDemonstrated experience establishing DevSecOps roadmaps, technical standards and security capabilities that improve engineering practices, reduce risk and deliver measurable business results.\nStrong knowledge of software supply chain security, secure development practices, threat modeling, vulnerability remediation and risk-based security controls.\nAbility to independently resolve complex technical challenges, evaluate security trade-offs and influence engineering decisions across multiple teams.\nDemonstrated ability to communicate complex security risks, guide technical teams, mentor engineers and coordinate cross-functional initiatives to deliver sustainable security improvements.\nCISSP, CCSP, GIAC or relevant cloud and DevSecOps certifications; experience securing AI/ML and generative AI solutions preferred.\nJob to be performed in the location listed. Generous benefit package available.\n© 2013 to 2026 Direct Supply, Inc. All rights reserved.","description_format":"text","description_chars":4994,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Senior Living & Assisted Living","Wholesale"],"lifecycle":[{"event":"open","at":"2026-10-28T21:41:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":55,"reasons":["conf:8","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/direct-supply-senior-software-security-architect","json_url":"https://alion.io/job/direct-supply-senior-software-security-architect.json","meta":{"generated_at":"2026-11-01T12:30:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19242,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2242045},"rest":"https://alion.io/mcp/rest/get_company?id=2242045"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdirect-supply-senior-software-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdirect-supply-senior-software-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdirect-supply-senior-software-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/direct-supply-senior-software-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdirect-supply-senior-software-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3423732}},{"tool":"search_jobs","arguments":{"company":"directsupply.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3423732},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}