Cybersecurity Compliance Facilitator

Loyal Source; New Freedom (York County); On-site; USD 94,000 - 128,000; Full time

Job summary

Loyal Source is seeking a Cybersecurity Compliance Facilitator to support cybersecurity readiness and SSDLC across a portfolio of embedded software products. The role is onsite in New Freedom, PA and collaborates with engineers, product managers, and leadership to ensure security requirements are understood and met throughout development.

The ideal candidate will manage SBOMs, participate in threat modeling and risk assessments, and track vulnerabilities and compliance across ~150 products.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field.
• 2+ years of cybersecurity, software security, or compliance-related experience.
• Knowledge of SSDLC practices.
• Experience with SBOM, Threat Modeling, Vulnerability Management, Security Documentation and Reporting.
• Familiarity with SDElements or similar tools.

Responsibilities

• Support SSDLC activities across embedded software products.
• Track vulnerabilities, remediation, and compliance requirements.
• Participate in threat modeling and security risk assessments.
• Create and maintain Software Bills of Materials (SBOMs).
• Support CVE and KEV analysis and reporting.
• Maintain cybersecurity documentation, metrics, dashboards, and records.
• Coordinate security backlog items and ensure timely deliverables.
• Facilitate collaboration between engineering, security, product management, and leadership.
• Assist with cyber resilience planning and compliance initiatives.

Skills

SSDLC

Threat modeling

Vulnerability management

Security reporting

Project coordination

Education

Bachelor's degree in Cybersecurity/CS/SE

Tools

SDElements

Job description

Cybersecurity Compliance Facilitator

Location: New Freedom, PA (100% Onsite)

Loyal Source is seeking a Cybersecurity Compliance Facilitator to support cybersecurity readiness and compliance initiatives across a large portfolio of embedded software products. This hands-on role focuses on secure software development lifecycle (SSDLC) activities, helping engineering teams maintain compliance, improve cyber resilience, and deliver secure products.

This position supports approximately 150 products and works closely with software engineers, security professionals, product managers, and engineering leadership to ensure cybersecurity requirements are understood, tracked, and completed throughout the development lifecycle.

Pay: $53.33/hr

Responsibilities

• Support secure software development lifecycle (SSDLC) activities across embedded software products.
• Track and monitor vulnerabilities, remediation efforts, and compliance requirements.
• Participate in threat modeling activities and security risk assessments.
• Create, manage, and maintain Software Bills of Materials (SBOMs).
• Support CVE and Known Exploited Vulnerability (KEV) analysis and reporting.
• Maintain cybersecurity documentation, project metrics, dashboards, and compliance records.
• Coordinate security backlog items and ensure timely completion of security deliverables.
• Facilitate collaboration between engineering, security, product management, and leadership teams.
• Assist with cyber resilience planning and compliance initiatives while supporting development teams in meeting security requirements.
• Track action items, remediation efforts, and security milestones across multiple projects.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or a related field.
• 2+ years of cybersecurity, software security, or compliance-related experience.
• Knowledge of Secure Software Development Lifecycle (SSDLC) practices.
• Experience with:
  • Software Bill of Materials (SBOM)
  • Threat Modeling
  • Vulnerability Management
  • Security Documentation and Reporting
• Familiarity with security tools such as SDElements or similar platforms.
• Strong organizational, communication, and project coordination skills.
• Ability to work onsite in New Freedom, PA.

Preferred Qualifications

• Experience with CVE and KEV analysis.
• Knowledge of IEC 62443, EN 62443, Cyber Resilience Act (CRA), or similar cybersecurity frameworks.
• Security+ or other cybersecurity certifications.
• Experience supporting cybersecurity compliance programs for embedded software or industrial control systems.
• Familiarity with product security, embedded systems, or operational technology environments.
• Recent graduates with a cybersecurity-focused degree and relevant internship experience are encouraged to apply.

Ideal Candidate

The ideal candidate is a cybersecurity professional with experience supporting secure software development and compliance initiatives. They should be comfortable working with engineering teams to track vulnerabilities, manage SBOMs, facilitate threat modeling activities, and ensure security requirements are met without impacting delivery timelines. Experience with embedded software security, product compliance, and cybersecurity frameworks is highly desired.

Please note: this position is notional and contingent upon the award of a government contract.

About Notional Opportunities:

Notional opportunities are roles in the planning stages and contingent on contract awards. By applying to notional positions, you can express early interest, enhancing your employment prospects and positioning yourself at the forefront of potential job opportunities. This proactive approach gives you an edge and boosts your visibility to employers, making it a strategic choice for those eager to explore future roles and expand your professional network.

About Loyal Source

Loyal Source provides healthcare and technology solutions designed to improve outcomes and support mission-critical operations. Guided by innovation and purpose, we help organizations achieve success across complex challenges worldwide. Loyal Source is a military friendly employer and proud partner of the Military Spouse Employment Partnership program.

Loyal Source uses AI‑powered voice screening as part of our application process. After you apply, you will receive a brief qualification survey via text or email. Candidates who meet the position requirements will then be invited to complete a quick AI‑powered voice assessment. This easy, no‑scheduling‑required process helps us and the candidate move the hiring process forward faster.

We are committed to providing equal employment opportunities to all applicants. If you have a disability or medical condition and need a reasonable accommodation to participate in this step of the hiring process, you may request an alternative method or accommodation at any time by contacting Human Resources at [e-mail].

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation by contacting HR at [e-mail]. If you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability, please select the accessibility menu to the (right or left) for more assistance. You can also request reasonable accommodations by contacting a telecommunications relay service by dialing 711 for direct access and assistance (tty).

This contractor and subcontractor abides by the requirements of 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a).
These regulations prohibit discrimination against qualified individuals on the basis of protected veteran status or disability, and require affirmative action by covered prime contractors.