Senior Cybersecurity manager

Pyramid Consulting, Inc; Atlanta (GA); On-site; USD 136,000 - 138,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking a Senior Cybersecurity Manager to lead our SBOM program on a 12+ month contract in Atlanta, onsite. The role requires deep expertise in software supply chain risk, secure SDLC, and SBOM standards.

You will drive governance, risk scoring, and vendor remediation while collaborating with SOC and Threat Intelligence teams. The ideal candidate has 10+ years of cybersecurity experience in app security or software supply chain risk, plus strong communication to

Qualifications

• 10+ years of cybersecurity experience focused on application security or software supply chain risk.
• Strong expertise in secure SDLC, CI/CD, and application architecture.
• Hands-on with SBOM standards (SPDX, Cyclone DX) and vulnerability management.
• Proven experience leading security programs or teams.
• Deep understanding of open-source risk and modern software architectures.
• Experience with cloud platforms (AWS/Azure/GCP).

Responsibilities

• Lead end-to-end SBOM program implementation across procurement and vendors.
• Define governance and enforcement for SBOMs across the org.
• Establish risk scoring for software components and dependencies.
• Integrate SBOM into CI/CD and SDLC pipelines.
• Collaborate with AppSec to identify vulnerable components.
• Own SBOM tooling platforms and ingestion pipelines (SPDX, Cyclone DX).
• Correlate SBOM data with CVE and Threat intel.
• Set contractual SBOM requirements and remediation with vendors.
• Integrate SBOM outputs into monitoring with SOC and threat intel teams.
• Define KPIs and dashboards for executive visibility.

Skills

Cybersecurity

Leadership

CI/CD

Secure SDLC

Threat modeling

Education

Security certifications (CISSP, etc.)

Tools

SBOM standards (SPDX)

CycloneDX

SBOM tooling

SCA tools

CI/CD tooling

Job description

Immediate need for a talented Senior Cybersecurity manager. This is a 12+ Months Contract opportunity with long-term potential and is located in Atlanta, GA(Onsite).

Job ID:26-32667

Pay Range: $99 - $100/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Lead end-to-end SBOM program implementation, including collection, ingestion, analysis, remediation, and continuous monitoring.
• Define governance, standards, and enforcement mechanisms for SBOMs across vendors and internal applications.
• Establish risk scoring methodologies for software components, libraries, and dependencies.
• Drive integration of SBOM processes into procurement, onboarding, and vendor lifecycle management.
• Embed SBOM generation and validation into CI/CD pipelines and SDLC processes.
• Collaborate with AppSec teams to identify vulnerable components and supply chain attack risks.
• Own the implementation and tuning of SBOM tooling platforms, overseeing ingestion pipelines for SBOM formats (e.g., SPDX, Cyclone DX).
• Correlate SBOM data with vulnerability intelligence (e.g., CVE, VEX) to identify risk exposure.
• Establish contractual SBOM requirements and lead remediation engagement with vendors on vulnerable software components.
• Integrate SBOM outputs into continuous monitoring and detection workflows, aligning with SOC and Threat Intelligence teams.
• Define KPIs, metrics, and reporting dashboards for executive visibility, moving beyond questionnaire-based vendor risk assessments.

Key Requirements and Technology Experience:

• 10+ years of cybersecurity experience with a focus on application security or software supply chain risk.
• Strong expertise in secure SDLC, CI/CD pipelines, and application architecture.
• Hands-on experience with SBOM standards (SPDX, Cyclone DX) and vulnerability management.
• Proven experience leading security programs or teams.
• Deep understanding of open-source risk and dependency management, modern software architectures (microservices, APIs, containers), and cloud platforms (AWS, Azure, GCP).
• Experience in threat modeling and application security testing.
• Ability to translate technical risk into business impact and influence senior stakeholders.
• Experience with SCA tools or dependency scanning.
• Knowledge of VEX, vulnerability exploitability scoring, and threat intelligence integration.
• Experience working with software composition analysis (SCA) tools.
• Strong communication skills with the ability to influence engineering, procurement, and executive teams.
• Certifications such as Security+, GSEC, CISSP, CSSLP, or similar.
• Experience in financial services or regulated environments.

Our client is a leading Banking and Financial Industry, and we are currently interviewing to fill this and other similar contract positions.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.