Federal Supply Chain Risk Analyst — Cyber & Vendor Risk

Quantum Sky; Washington (District of Columbia); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is actively seeking a forward-thinking SCRM Analyst to support U.S. federal customers in Washington, DC. You will assess supply chain risk, evaluate vendor risk, and translate findings into executive-ready briefings and actionable recommendations.

The role requires deep knowledge of cybersecurity controls, SIEM, and attack tools, with experience delivering guidance to senior leaders. Collaboration is key in a dynamic, mission-driven environment.

Qualifications

• Bachelor’s Degree or equivalent combination of education and experience.
• Minimum of eight years general experience and six years in the Functional Responsibility area; Master’s may substitute for four years.
• Experience with hardware or software assurance and familiarity with cybersecurity controls.
• Knowledge of TCP/IP, packet analysis, SIEM operation, and intrusion detection technologies.
• Understanding exploits, root kits, malware, and popular attack tools; ability to communicate security status to executives.
• Awareness of Nation State APT tradecraft and governance policies.
• Experience with major security tooling listed in qualifications.
• Strong analytical, organizational, and written communication skills.

Responsibilities

• Provide expertise in SCRM and assess client supply chain programs against best practices and improvements.
• Evaluate vendor/supplier risk and deliver assessment reports to executives.
• Prepare briefings, reports, and presentations for decision-makers; translate analysis for leadership.
• Monitor and communicate updates on federal policies and guidance affecting SCRM programs.
• Lead scalable assessment teams conducting research, risk identification, and continuous monitoring.

Skills

Bachelor's Degree or Equivalent

General exp 8+ yrs

SCRM/InfoSec knowledge

Hardware/Software Assurance

TCP/IP

Packet Analysis

SIEM Operations

Exploit analysis

Intrusion Detection

Malware/rootkits

Attack tools awareness

APTs awareness

Government cybersecurity policies

Analytical skills

Written communication

Education

Bachelor’s Degree or equivalent

Tools

ArcSight SIEM

Splunk

Novetta Cyber Analytics

FireEye MPS Suite

Snort IDS

Bro IDS

Fidelis XPS

CloudShield

Microsoft Advanced Threat Analytics

Counterattack Active Defense

Job description

Quantum Sky is actively seeking a forward-thinking SCRM Analyst to support U.S. federal customers in Washington, DC. You will assess supply chain risk, evaluate vendor risk, and translate findings into executive-ready briefings and actionable recommendations.

The role requires deep knowledge of cybersecurity controls, SIEM, and attack tools, with experience delivering guidance to senior leaders. Collaboration is key in a dynamic, mission-driven environment.