Senior Cyber Security Engineer

Direct Supply is hiring a Senior Cyber Security Engineer to identify, assess, and reduce cybersecurity risks across its technology environments through hands-on vulnerability management and penetration testing.

Responsibilities

• Own vulnerability management operations by creating and maintaining effective processes
• Maintain and support security scanning tools to ensure reliable coverage across infrastructure, cloud, and application environments
• Identify and reduce security exposure by consistently validating and improving scan coverage
• Analyze and prioritize vulnerabilities by validating findings and assessing exploitability, asset criticality, and business impact
• Drive vulnerability remediation by partnering with engineering and operations to coordinate corrective actions
• Monitor remediation progress, verify fixes, and escalate unresolved risks
• Improve security processes by automating scanning, ticketing, and reporting workflows to reduce manual effort and improve consistency
• Monitor and report security performance using metrics for scanning coverage, remediation progress, overdue vulnerabilities, and recurring risks
• Plan and execute internal and external penetration testing by defining scope, conducting testing, and identifying exploitable weaknesses
• Validate security weaknesses and potential attack paths using automated discovery, manual testing, and controlled exploitation to assess business impact
• Coordinate external penetration testing services by managing scope, schedules, access, deliverables, and provider performance
• Support resolution of penetration testing findings by validating results, providing remediation guidance, coordinating corrective actions, and retesting fixes
• Strengthen security practices through root-cause analysis, recommendations for system design and configuration improvements, and knowledge sharing to reduce recurring vulnerabilities

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field
• 6+ years of progressive experience in information security or security engineering, including hands-on vulnerability management and penetration testing
• Proven expertise in vulnerability assessment, security scanning platforms, asset coverage, finding validation, and risk-based prioritization
• Hands-on experience conducting internal and external penetration testing, including manual validation, controlled exploitation, security risk assessment, and technical reporting
• Experience operating, configuring, and troubleshooting security platforms; automation experience for security workflows to improve operational efficiency and testing effectiveness
• Ability to assess vulnerabilities and security risks across infrastructure, cloud, and application environments, including complex cloud environments
• Capability to independently investigate complex security issues, identify root causes, and recommend practical corrective actions that reduce recurring risks
• Experience coordinating external security testing providers and communicating technical findings, remediation priorities, and security risks to technical stakeholders and leadership
• OSCP, GPEN, GWAPT or relevant vulnerability management certifications
• Scripting and API integration experience
• Experience testing web applications, APIs, and cloud environments preferred

Technologies

• OSCP
• GPEN
• GWAPT
• API integration

Benefits

• Generous benefit package available

Location: Milwaukee, WI (onsite)

Minimum Experience: 6 years