Senior Cyber Security Engineer

Direct Supply is seeking a Senior Cyber Security Engineer to identify, assess, and reduce cybersecurity risks across its technology environments. This onsite role focuses on hands-on ownership of vulnerability management and penetration testing to strengthen security controls and protect business systems and information.

Responsibilities

• Own vulnerability management operations by establishing effective processes, maintaining security scanning tools, and ensuring reliable coverage across infrastructure, cloud, and application environments to identify and reduce security exposure.
• Analyze and prioritize security vulnerabilities by validating findings and assessing exploitability, asset criticality, and business impact to focus remediation efforts on the highest risks.
• Drive vulnerability remediation by partnering with engineering and operations teams to coordinate corrective actions, monitor progress, verify fixes, and escalate unresolved risks.
• Improve security processes by automating scanning, ticketing, and reporting workflows to increase efficiency, strengthen consistency, and reduce manual effort.
• Monitor and report security performance using metrics such as scanning coverage, remediation progress, overdue vulnerabilities, and recurring risks to improve visibility and support informed decisions.
• Plan and execute internal and external penetration testing by defining assessment scope, conducting security testing, and identifying exploitable weaknesses to strengthen security defenses.
• Validate security weaknesses and potential attack paths through automated discovery, manual testing, and controlled exploitation to assess business impact and deliver actionable findings.
• Coordinate external penetration testing services by managing testing scope, schedules, access, and deliverables while monitoring provider performance to ensure effective testing coverage and quality.
• Drive resolution of penetration testing findings by validating results, providing remediation guidance, coordinating corrective actions, and retesting fixes to confirm vulnerabilities have been addressed.
• Strengthen security practices by analyzing root causes, recommending improvements to system designs and configurations, and sharing technical knowledge to prevent recurring vulnerabilities.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field.
• 6+ years of progressive experience in information security or security engineering, including hands-on experience in vulnerability management and penetration testing.
• Demonstrated expertise in vulnerability assessment, security scanning platforms, asset coverage, finding validation, and risk-based prioritization to identify and reduce security exposure.
• Hands-on experience conducting internal and external penetration testing, including manual validation, controlled exploitation, security risk assessment, and technical reporting.
• Experience operating, configuring, and troubleshooting security platforms, and automating security workflows to improve operational efficiency and testing effectiveness.
• Experience assessing vulnerabilities and security risks across infrastructure, cloud, and application environments, including complex cloud environments.
• Ability to independently investigate complex security issues, identify root causes, and recommend practical corrective actions that reduce recurring risks.
• Experience coordinating external security testing providers and communicating technical findings, remediation priorities, and security risks to technical stakeholders and leadership.
• OSCP, GPEN, GWAPT, or relevant vulnerability management certifications; scripting and API integration experience; and experience testing web applications, APIs, and cloud environments preferred.

Technologies

• OSCP
• GPEN
• GWAPT
• API integration

Location

Milwaukee, WI (onsite)

Benefits

• Generous benefit package available