C-SCRM Security Engineer for DoD Cyber Supply Chain

PeopleTec, Inc.; Huntsville (AL); On-site; USD 110,000 - 170,000; Full time

Job summary

PeopleTec, Inc. seeks a System Security Engineer specializing in Cyber-Supply Chain Risk Management (C-SCRM) to support the Huntsville, AL program. You will secure software supply chains by analyzing third-party code and build processes, and present findings to senior leadership.

You will coordinate with PMO and external partners to ensure SBOMs, SCA/SAST standards, and risk mitigations are implemented across the lifecycle, from design to sustainment. U.S.

Qualifications

• 5+ years of relevant experience.
• Demonstrated experience in C-SCRM, particularly within defense or aerospace industries.
• Knowledge of SPDX/CycloneDX, Software Composition Analysis (SCA), SAST/DAST, VEX, and FIPS 140-3 validation.
• Must meet DoDI 8140.03 Defense Cyber Workforce requirements: 622 Intermediate or 652 Intermediate.
• Strong knowledge of industry standards and defense requirements.
• Excellent communication and presentation skills.
• Ability to lead a multidisciplinary team.
• Previous experience in a U.S. Government Program Office is required.
• Travel: 25%
• Must be a U.S. Citizen
• Active DoD Secret clearance required on hire.

Responsibilities

• Provide technical support and security engineering in C-SCRM across the system lifecycle.
• Mandate and manage SBOMs for all procured and open-source software.
• Perform deep-dive vulnerability analysis and code provenance checks on third-party libraries.
• Establish SCA and SAST requirements within vendor onboarding.
• Develop and maintain SBOMs, Third-Party Software Vulnerability Reports, and Supplier Attestation Forms.
• Ensure compliance with defense and industry standards by managing C-SCRM processes.
• Interface with internal teams and external organizations to coordinate C-SCRM objectives.
• Prepare and present C-SCRM findings and improvement plans to senior management.
• Conduct strategic planning to support program objectives.
• Provide technical expertise to peer engineers across teams.

Skills

C-SCRM

SBOM

Vulnerability analysis

Communication

Travel 25%

Education

Bachelor's degree in CS/Engineering

Tools

SPDX/CycloneDX

SCA

SAST/DAST

FIPS 140-3

Job description

PeopleTec, Inc. seeks a System Security Engineer specializing in Cyber-Supply Chain Risk Management (C-SCRM) to support the Huntsville, AL program. You will secure software supply chains by analyzing third-party code and build processes, and present findings to senior leadership.

You will coordinate with PMO and external partners to ensure SBOMs, SCA/SAST standards, and risk mitigations are implemented across the lifecycle, from design to sustainment. U.S.