Senior Cybersecurity Leader - SBOM & Supply Chain Risk

Pyramid Consulting, Inc; Atlanta (GA); On-site; USD 136,000 - 138,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking a Senior Cybersecurity Manager to lead our SBOM program on a 12+ month contract in Atlanta, onsite. The role requires deep expertise in software supply chain risk, secure SDLC, and SBOM standards.

You will drive governance, risk scoring, and vendor remediation while collaborating with SOC and Threat Intelligence teams. The ideal candidate has 10+ years of cybersecurity experience in app security or software supply chain risk, plus strong communication to

Qualifications

• 10+ years of cybersecurity experience focused on application security or software supply chain risk.
• Strong expertise in secure SDLC, CI/CD, and application architecture.
• Hands-on with SBOM standards (SPDX, Cyclone DX) and vulnerability management.
• Proven experience leading security programs or teams.
• Deep understanding of open-source risk and modern software architectures.
• Experience with cloud platforms (AWS/Azure/GCP).

Responsibilities

• Lead end-to-end SBOM program implementation across procurement and vendors.
• Define governance and enforcement for SBOMs across the org.
• Establish risk scoring for software components and dependencies.
• Integrate SBOM into CI/CD and SDLC pipelines.
• Collaborate with AppSec to identify vulnerable components.
• Own SBOM tooling platforms and ingestion pipelines (SPDX, Cyclone DX).
• Correlate SBOM data with CVE and Threat intel.
• Set contractual SBOM requirements and remediation with vendors.
• Integrate SBOM outputs into monitoring with SOC and threat intel teams.
• Define KPIs and dashboards for executive visibility.

Skills

Cybersecurity

Leadership

CI/CD

Secure SDLC

Threat modeling

Education

Security certifications (CISSP, etc.)

Tools

SBOM standards (SPDX)

CycloneDX

SBOM tooling

SCA tools

CI/CD tooling

Job description

Pyramid Consulting, Inc. is seeking a Senior Cybersecurity Manager to lead our SBOM program on a 12+ month contract in Atlanta, onsite. The role requires deep expertise in software supply chain risk, secure SDLC, and SBOM standards.

You will drive governance, risk scoring, and vendor remediation while collaborating with SOC and Threat Intelligence teams. The ideal candidate has 10+ years of cybersecurity experience in app security or software supply chain risk, plus strong communication to