System Engineer II - SBOM

Black Eagle Defense; Fort Meade (MD); On-site; USD 128,000 - 185,000; Full time

Job summary

Black Eagle Defense seeks a Systems Engineer II (Software Analyst) to support NIAP missions at Fort Meade. You will perform SBOM analysis and software assurance for commercial technologies targeting NSS and sensitive U.S. government environments.

You will evaluate OSS risk, vulnerabilities, and vendor cybersecurity practices across the software lifecycle, ensuring transparency and security of software ecosystems.

Qualifications

• Experience with software SBOM analysis and OSS risk assessment.
• Strong background in cybersecurity practices for software supply chains.
• Ability to evaluate third-party components and development processes.

Responsibilities

• Conduct in-depth software assurance and SBOM analysis for NSS environments.
• Assess software components, dependencies, and vendor practices across lifecycles.

Skills

SBOM analysis

OSS risk analysis

Vulnerability identification

Software assurance

Vendor cybersecurity practices

Job description

SALARY RANGE $128,000 - $185,000/year.

DUTIES As a successful candidate for the Systems Engineer II (Software Analyst) role, you will support the mission of the National Information Assurance Partnership (NIAP) by conducting in-depth software assurance and Software Bill of Materials (SBOM) analysis for commercial technologies seeking evaluation, authorization, or deployment within National Security Systems (NSS) and sensitive U.S. Government environments. In this capacity, you will focus heavily on software supply chain transparency, software provenance, open-source software (OSS) risk analysis, vulnerability identification, and vendor cybersecurity practices. You will evaluate software components, dependencies, development practices, and third-party supplier risks to mitigate potential threats to system confidentiality, integrity, and availability, leveraging strong technical analysis and cybersecurity knowledge to assess software ecosystems across the full lifecycle.