System Security Engineer Cyber-Supply Chain Risk Management

PeopleTec is currently seeking a System Security Engineer Cyber-Supply Chain Risk Management (C-SCRM)to support our Huntsville ALlocation.

The candidate will serve as a System Security Engineer Cyber-Supply Chain Risk Management (C-SCRM) within a Project Management Office (PMO) within PAE Fires and will be responsible for providing technical support to the programs Chief Engineer and the Technical Chief. The candidate will secure the software supply chain by analyzing third-party code dependencies and build processes for vulnerabilities and malicious logic before integration across the system lifecycle (design development acquisition integration testing fielding and sustainment). The candidate will prepare and present C-SCRM findings reports and improvement plans to senior management and stakeholders. Will work within a multidisciplinary security and engineering team to achieve program goals. Perform other tasks as assigned by the Chief Engineer and/or Technical Chief.

The candidate will be required to interface with internal PMs across PAE Fires and external organizations to include HQDA ASA(ALT) JIATF 401 ATEC AMCOM and others for coordination and synchronization of C-SCRM technical and programmatic objectives.

Duties:

• Provide technical support and security engineering in C-SCRM across the system lifecycle (design development acquisition integration testing fielding and sustainment).

• Mandate and manage Software Bills of Materials (SBOMs) for all procured and open-source software.

• Perform deep-dive vulnerability analysis and code provenance checks on third-party libraries.

• Establish Software Composition Analysis (SCA) and Static Analysis (SAST) requirements within vendor onboarding.

• Develop and maintain the Consolidated Program Software Bill of Materials (SBOM) Third-Party Software Vulnerability Reports and Supplier Secure Software Attestation Forms.

• Ensure compliance with defense and industry standards by managing C-SCRM processes effectively.

• Interface with internal teams and external organizations to coordinate C-SCRM objectives and strategies.

• Prepare and present C-SCRM findings reports and improvement plans to senior management and stakeholders.

• Conduct strategic planning and coordination to support program objectives.

• Provide technical expertise to support peer engineers within the Technology Security Program Protection Cyber Security and Technical Management teams.

• Use digital tools and methodologies to analyze supply chain risks manufacturer/supplier relationships and foreign ownership and controlling influence.

• Perform other tasks as assigned by the Chief Engineer and/or Technical Chief.

Required Skills/Experience:

• 5 years of relevant experience. Additional education may be substituted for years of experience.

• Demonstrated experience in C-SCRM particularly within defense or aerospace industries.

• Knowledge of SPDX/CycloneDX Software Composition Analysis (SCA) SAST/DAST VEX and FIPS 140-3 validation.

• Must meet minimum DoDI 8140.03 Defense Cyber Workforce qualification requirements in one of the following work roles: 622 (Secure Software Assessor) at the Intermediate level or 652 (Security Architect) at the Intermediate level.

• Strong knowledge of industry standards and defense requirements.

• Excellent communication and presentation skills.

• Ability to lead and work within a multidisciplinary team.

• Previous experience working in a U.S. Government Program Office (required).

• Travel: 25%

• Must be a U.S. Citizen
• An active DoD Secret clearance is required to perform this work. Candidates are required to have an active Secret clearance upon hire and the ability to maintain this level of clearance during their employment.

Education Requirements:

• Bachelors degree in Computer Science Engineering or a related technical discipline

Desired Skills:

• Top Secret clearance preferred
• DoDI 8140.03 qualification at the Advanced level for work role 622 (Secure Software Assessor) or 652 (Security Architect)

People First. Technology Always.

PeopleTec Inc. is an employee-owned small business founded in Huntsville AL that provides exceptional customer support by employing and retaining a highly skilled workforce.

Culture: The name PeopleTec was deliberately chosen to remind us of our core value system - our people. Our companys foundation was built on placing our employees and customers first. With an award-winning atmosphere we have matured into a company that boasts the best and brightest across multiple technical fields.

Career: At PeopleTec we value your long-term goals. Whether its through our continuing-education opportunities our robust training programs or our People First benefits package PeopleTec truly believes that our best investments are our people.

Come Experience It.

#cjpost #dpost

EEO Statement

PeopleTec Inc. is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online system and you need an accommodation due to a disability you may use the following email address and/or phone number (256.319.3800) to contact us about your interest in employment with PeopleTec Inc.

All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin age genetic information citizenship ancestry marital status protected veteran status disability status or any other status protected by federal state or local law. PeopleTec Inc. participates in E-Verify.