Supply Chain Risk Management Analyst

Quantum Sky; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Quantum Sky seeks a forward-thinking SCRM Analyst to support a Federal government client in Washington, DC. The role focuses on securing the government’s technology supply chain with detailed analysis, reporting, and collaboration with senior leaders.

The ideal candidate has extensive experience in supply chain risk management, cybersecurity policies, and DoD/Federal programs. Strong communication and organizational skills are essential for success in a highly collaborative environment.

Qualifications

• Bachelor’s Degree or equivalent combination of formal education.
• 8 years general experience and 6 years in the Functional Responsibility area; Masters may substitute for 4 years.
• Experience with hardware or software assurance.
• Knowledge of TCP/IP and packet analysis; SIEM operation.
• Understanding of exploits, root kits, malware and cyber attack tools.
• Ability to communicate incident status to executive decision-makers.
• Awareness of Nation State APT tradecraft.
• Experience implementing SCRM in DoD or Federal organizations.

Responsibilities

• Provide expertise in supply chain risk management and assess a client’s program against best practices and improve recommendations.
• Evaluate vendor/supplier risk and perform assessments.
• Prepare reports, briefings, reviews, and presentations for executive decision-makers.
• Keep clients informed of current SCRM policies, guidance, and strategies.
• Lead a scalable assessment team for risk assessments and continuous monitoring.

Skills

SCRM Analysis

Supply Chain Risk

Hardware Assurance

Software Assurance

Network Analysis

SIEM Proficiency

Threat Intelligence

Documentation & Reporting

Federal Compliance

Education

Bachelor's Degree

Tools

ArcSight SIEM

Splunk

Novetta Cyber Analytics

FireEye MPS Suite

Snort IDS

Bro IDS

Fidelis XPS

CloudShield

Microsoft ATA

Counterattack Active Defense

Job description

Quantum Sky is searching for a forward-thinking and self-motivated Supply Chain Risk Management (SCRM) Analyst to support one of our law enforcement customers in Washington, DC. You will be responsible for helping Federal customers solve one of the most critical challenges that exist in cybersecurity today, how to secure the government’s technology supply chain. This exciting role requires an appetite for learning, superior attention to detail, the ability to meet tight deadlines, great organizational skills, and the ability to work in a highly collaborative work environment. Professionalism in dealing with senior leaders within the Federal Government is important.

Responsibilities:

• Provide expertise in supply chain risk management and assess a client’s supply chain program, policies, and procedures against best practices, and make improvement recommendations
• Provide expertise in vendor/supplier assessment and evaluation
• Prepare reports, briefings, point papers, reviews, and oral presentations as may be directed to translate the results from the analysis to executive decision-makers
• Keep clients and staff informed of the most up-to-date information regarding supply chain risk management best practices and any relevant current Federal Government policies, guidance, memorandums, and strategies that might affect the client’s SCRM program
• Lead and develop a scalable assessment team that will perform supply chain risk assessments, including research, analysis, identification of risk, and continuous monitoring of supply chain vulnerabilities
• Perform supply chain risk assessments, including research, analysis, identification of risk, and continuous monitoring of supply chain vulnerabilities

Required:

• Bachelor’s Degree or an equivalent combination of formal education
• Minimum of eight (8) years of general experience and six (6) years of experience in the Functional Responsibility area. A Masters Degree may be substituted for four (4) years of general work experience.
• Experience with hardware or software assurance
• Knowledge of:
• TCP/IP
• Packet Analysis
• SIEM Operation
• Understanding of how exploits work and appear within network traffic
• Understanding of root kits, exploits, and other types of malware
• Awareness and understanding of popular attack tools (e.. Zeus, Blackhole, Slowloris, LOIC, Cryptolocker, Pony Loader, etc.)Ability to communicate effectively the actual status of an incident, attack, or other cyber issue.
• Awareness of tradecraft used by Nation State APT actors
• Capability to support the following systems: ArcSight SIEM; Splunk; Novetta Cyber Analytics; FireEye MPS Suite; Snort IDS; Bro IDS; Fidelis XPS; CloudShield Trusted Cyber Solution Orchestrator; Microsoft Advanced Threat Analytics; Counterattack Active Defense
• Well-versed with Government cybersecurity policies and regulations
• Strong analytical and organizational skills
• Possession of excellent oral and written communication skills
• Experience with implementing supply chain risk management activities in the DoD or other Federal Organizations