C-SCRM System Security Engineer (DoD Secret)

PeopleTec; Huntsville (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

PeopleTec, Inc. in Huntsville, AL, seeks a System Security Engineer (C-SCRM) to secure the software supply chain across the system lifecycle, from design to sustainment.

The candidate must be a U.S. citizen with an active DoD Secret clearance, 5+ years in C-SCRM, and experience with SBOMs, SCA, and static/dynamic analysis; travel 25% is required. You will interface with HQDA, ASA(ALT), JIATF 401, ATEC, AMCOM, and others for coordination.

Qualifications

• 5+ years of relevant experience. Additional education may be substituted for years of experience.
• Demonstrated experience in C-SCRM within defense or aerospace industries.
• Knowledge of SPDX/CycloneDX, SCA, SAST/DAST, VEX, and FIPS 140-3 validation.
• Must meet DoDI 8140.03 Defense Cyber Workforce requirements: 622 Intermediate or 652 Intermediate.
• Strong knowledge of industry standards and defense requirements.

Responsibilities

• Provide technical security engineering in C-SCRM across the system lifecycle.
• Mandate and manage SBOMs for procured and open-source software.
• Perform deep-dive vulnerability analysis on third-party libraries.
• Establish SCA and SAST requirements with vendor onboarding.
• Develop and maintain SBOMs, vulnerability reports, and supplier attestations.
• Coordinate C-SCRM objectives with internal teams and external organizations.
• Present findings and improvement plans to senior management.

Skills

C-SCRM

SBOM management

Vulnerability analysis

DoD standards

Clearance: Secret

Communication

Team leadership

Education

Bachelor's degree in Computer Science or Engineering

Tools

SPDX/CycloneDX

Software Composition Analysis (SCA)

SAST/DAST

VEX

FIPS 140-3 validation

Job description

PeopleTec, Inc. in Huntsville, AL, seeks a System Security Engineer (C-SCRM) to secure the software supply chain across the system lifecycle, from design to sustainment.

The candidate must be a U.S. citizen with an active DoD Secret clearance, 5+ years in C-SCRM, and experience with SBOMs, SCA, and static/dynamic analysis; travel 25% is required. You will interface with HQDA, ASA(ALT), JIATF 401, ATEC, AMCOM, and others for coordination.