Supply Chain Risk Management Analyst

Quantum Sky; Washington (District of Columbia); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is actively seeking a forward-thinking SCRM Analyst to support U.S. federal customers in Washington, DC. You will assess supply chain risk, evaluate vendor risk, and translate findings into executive-ready briefings and actionable recommendations.

The role requires deep knowledge of cybersecurity controls, SIEM, and attack tools, with experience delivering guidance to senior leaders. Collaboration is key in a dynamic, mission-driven environment.

Qualifications

• Bachelor’s Degree or equivalent combination of education and experience.
• Minimum of eight years general experience and six years in the Functional Responsibility area; Master’s may substitute for four years.
• Experience with hardware or software assurance and familiarity with cybersecurity controls.
• Knowledge of TCP/IP, packet analysis, SIEM operation, and intrusion detection technologies.
• Understanding exploits, root kits, malware, and popular attack tools; ability to communicate security status to executives.
• Awareness of Nation State APT tradecraft and governance policies.
• Experience with major security tooling listed in qualifications.
• Strong analytical, organizational, and written communication skills.

Responsibilities

• Provide expertise in SCRM and assess client supply chain programs against best practices and improvements.
• Evaluate vendor/supplier risk and deliver assessment reports to executives.
• Prepare briefings, reports, and presentations for decision-makers; translate analysis for leadership.
• Monitor and communicate updates on federal policies and guidance affecting SCRM programs.
• Lead scalable assessment teams conducting research, risk identification, and continuous monitoring.

Skills

Bachelor's Degree or Equivalent

General exp 8+ yrs

SCRM/InfoSec knowledge

Hardware/Software Assurance

TCP/IP

Packet Analysis

SIEM Operations

Exploit analysis

Intrusion Detection

Malware/rootkits

Attack tools awareness

APTs awareness

Government cybersecurity policies

Analytical skills

Written communication

Education

Bachelor’s Degree or equivalent

Tools

ArcSight SIEM

Splunk

Novetta Cyber Analytics

FireEye MPS Suite

Snort IDS

Bro IDS

Fidelis XPS

CloudShield

Microsoft Advanced Threat Analytics

Counterattack Active Defense

Job description

Description

Quantum Sky is searching for a forward-thinking and self-motivated Supply Chain Risk Management (SCRM) Analyst to support one of our law enforcement customers in Washington, DC. You will be responsible for helping Federal customers solve one of the most critical challenges that exist in cybersecurity today, how to secure the government’s technology supply chain. This exciting role requires an appetite for learning, superior attention to detail, the ability to meet tight deadlines, great organizational skills, and the ability to work in a highly collaborative work environment. Professionalism in dealing with senior leaders within the Federal Government is important.

Responsibilities:

• Provide expertise in supply chain risk management and assess a client’s supply chain program, policies, and procedures against best practices, and make improvement recommendations


• Provide expertise in vendor/supplier assessment and evaluation


• Prepare reports, briefings, point papers, reviews, and oral presentations as may be directed to translate the results from the analysis to executive decision-makers


• Keep clients and staff informed of the most up-to-date information regarding supply chain risk management best practices and any relevant current Federal Government policies, guidance, memorandums, and strategies that might affect the client’s SCRM program


• Lead and develop a scalable assessment team that will perform supply chain risk assessments, including research, analysis, identification of risk, and continuous monitoring of supply chain vulnerabilities


• Perform supply chain risk assessments, including research, analysis, identification of risk, and continuous monitoring of supply chain vulnerabilities

Qualifications

Required:

• Bachelor’s Degree or an equivalent combination of formal education


• Minimum of eight (8) years of general experience and six (6) years of experience in the Functional Responsibility area. A Masters Degree may be substituted for four (4) years of general work experience.


• Experience with hardware or software assurance


• Knowledge of:
  
  
  • TCP/IP
  
  
  • Packet Analysis
  
  
  • SIEM Operation
  
  
  • Understanding of how exploits work and appear within network traffic
  
  
  • Intrusion Detection Technology
  
  
  • Understanding of root kits, exploits, and other types of malware
  
  
  • Awareness and understanding of popular attack tools (e.. Zeus, Blackhole, Slowloris, LOIC, Cryptolocker, Pony Loader, etc.)Ability to communicate effectively the actual status of an incident, attack, or other cyber issue.
  
  
  • Awareness of tradecraft used by Nation State APT actors
  
  
  • Capability to support the following systems: ArcSight SIEM; Splunk; Novetta Cyber Analytics; FireEye MPS Suite; Snort IDS; Bro IDS; Fidelis XPS; CloudShield Trusted Cyber Solution Orchestrator; Microsoft Advanced Threat Analytics; Counterattack Active Defense
  
  


• Well-versed with Government cybersecurity policies and regulations


• Strong analytical and organizational skills


• Possession of excellent oral and written communication skills

Desired:

• Experience with implementing supply chain risk management activities in the DoD or other Federal Organizations

About Quantum Sky

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $140,000 and $160,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.

At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?

Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.