Cybersecurity Compliance Lead — SSDLC for Embedded Apps

Loyal Source; New Freedom (York County); On-site; USD 94,000 - 128,000; Full time

Job summary

Loyal Source is seeking a Cybersecurity Compliance Facilitator to support cybersecurity readiness and SSDLC across a portfolio of embedded software products. The role is onsite in New Freedom, PA and collaborates with engineers, product managers, and leadership to ensure security requirements are understood and met throughout development.

The ideal candidate will manage SBOMs, participate in threat modeling and risk assessments, and track vulnerabilities and compliance across ~150 products.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field.
• 2+ years of cybersecurity, software security, or compliance-related experience.
• Knowledge of SSDLC practices.
• Experience with SBOM, Threat Modeling, Vulnerability Management, Security Documentation and Reporting.
• Familiarity with SDElements or similar tools.

Responsibilities

• Support SSDLC activities across embedded software products.
• Track vulnerabilities, remediation, and compliance requirements.
• Participate in threat modeling and security risk assessments.
• Create and maintain Software Bills of Materials (SBOMs).
• Support CVE and KEV analysis and reporting.
• Maintain cybersecurity documentation, metrics, dashboards, and records.
• Coordinate security backlog items and ensure timely deliverables.
• Facilitate collaboration between engineering, security, product management, and leadership.
• Assist with cyber resilience planning and compliance initiatives.

Skills

SSDLC

Threat modeling

Vulnerability management

Security reporting

Project coordination

Education

Bachelor's degree in Cybersecurity/CS/SE

Tools

SDElements

Job description

Loyal Source is seeking a Cybersecurity Compliance Facilitator to support cybersecurity readiness and SSDLC across a portfolio of embedded software products. The role is onsite in New Freedom, PA and collaborates with engineers, product managers, and leadership to ensure security requirements are understood and met throughout development.

The ideal candidate will manage SBOMs, participate in threat modeling and risk assessments, and track vulnerabilities and compliance across ~150 products.