Vulnerability Analyst Mid / SBOM & Supply Chain Risk Management Specialist
New
Based in the United StatesFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years
Requirements
- Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
- 3+ years of experience in cybersecurity, information assurance, or systems security roles.
- Active certification such as Security+, Network+, A+, SSCP, or equivalent.
- Hands-on experience with SBOM analysis, validation tools, or software supply chain risk management.
- Strong understanding of cybersecurity frameworks, including NIST and RMF principles.
- Experience with security tools such as SIEM, firewalls, intrusion detection systems, or endpoint protection platforms.
- Ability to analyze technical vulnerabilities and recommend practical mitigation strategies.
- Strong written and verbal communication skills for reporting and stakeholder interaction.
- Strong organizational skills with the ability to manage competing priorities.
- Experience in federal, military, or government contracting environments is highly preferred.
- Familiarity with vulnerability management, DevSecOps, or software assurance practices is a plus.
Responsibilities
- Analyze and resolve complex information security and technical issues across systems, applications, and networks.
- Review and validate Software Bill of Materials (SBOMs) using relevant tools and methodologies.
- Support software supply chain risk management by assessing dependencies, vendors, and third-party components.
- Conduct security analysis, testing, and assurance activities across systems and cybersecurity solutions.
- Assist in the design, integration, and implementation of security controls within government environments.
- Evaluate and support cybersecurity tools such as firewalls, IDS/IPS, SIEM platforms, and endpoint security solutions.
- Apply cybersecurity frameworks and policies including government and industry standards (e.g., NIST, RMF).
- Provide technical recommendations, documentation, and reporting on security findings and remediation steps.
View Full Description & ApplyYou'll be redirected to the employer's site
