Security-Cleared Software Supply Chain Analyst

Xcelerate Solutions; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Xcelerate Solutions is seeking a Software Supply Chain Analyst to support CyberPRIMES cybersecurity, privacy, records and information management for DHRA, DMDC, and OUSD(P&R). The position is located in Alexandria, VA with an Active Secret clearance.

Responsibilities include evaluating software components for supply-chain risk, analyzing vulnerabilities, coordinating remediation with stakeholders, and maintaining documentation per PWS 5.4.3.

Qualifications

• Bachelor’s degree in a technical or related discipline.
• Four to seven years of experience in the field or a related area.
• Must be U.S. Citizen.
• A Secret clearance is required when duties require classified information or SIPRNet access.

Responsibilities

• Support the Software Supply Chain Management program and evaluate software, components, dependencies, and supply-chain risks.
• Conduct proactive research and analyze security weaknesses affecting software and third-party components.
• Review scan results and assessment artifacts, validate findings, and prioritize vulnerabilities based on risk and impact.
• Coordinate with development, cybersecurity, and program stakeholders on remediation and risk-reduction actions.
• Maintain accurate software supply-chain documentation, reporting, and recommendations required by PWS 5.4.3.
• Analyze changes affecting software products and baselines, prepare change documentation, and verify that configuration activities adhere to approved procedures and policies.

Education

Bachelor’s degree in a technical or related discipline

Job description

Xcelerate Solutions is seeking a Software Supply Chain Analyst to support CyberPRIMES cybersecurity, privacy, records and information management for DHRA, DMDC, and OUSD(P&R). The position is located in Alexandria, VA with an Active Secret clearance.

Responsibilities include evaluating software components for supply-chain risk, analyzing vulnerabilities, coordinating remediation with stakeholders, and maintaining documentation per PWS 5.4.3.