Software Supply Chain Analyst - Cybersecurity & Risk

Xcelerate-Solutions-5; Alexandria (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Xcelerate Solutions is seeking a Software Supply Chain Analyst to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). Responsibilities include evaluating software components, researching security weaknesses, and coordinating remediation with development and cybersecurity teams.

A bachelor’s degree is required, with 4–7 years experience; U.S.

Qualifications

• Bachelor’s degree in a technical or related discipline.
• 4–7 years of experience in the field or related area.
• Must be U.S. Citizen; A Secret clearance is required when duties require classified information or SIPRNet access.

Responsibilities

• Support the Software Supply Chain Management program and evaluate software, components, dependencies, and associated supply-chain risks.
• Conduct proactive research and analyze security weaknesses affecting software and third-party components.
• Review scan results and assessment artifacts, validate findings, and prioritize vulnerabilities based on risk and impact.
• Coordinate with development, cybersecurity, and program stakeholders on remediation and risk-reduction actions.
• Maintain accurate software supply-chain documentation, reporting, and recommendations required by PWS 5.4.3.
• Analyze changes affecting software products and baselines, prepare change documentation, and verify that configuration activities adhere to approved procedures and policies.

Skills

US Citizenship

Secret clearance

Education

Bachelor’s degree in technical or related discipline

Job description

Xcelerate Solutions is seeking a Software Supply Chain Analyst to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). Responsibilities include evaluating software components, researching security weaknesses, and coordinating remediation with development and cybersecurity teams.

A bachelor’s degree is required, with 4–7 years experience; U.S.