Senior Cybersecurity / Supply Chain Risk Management SME

Senior Cybersecurity / Supply Chain Risk Management SME

LeBrun Management Solutions LLC – Dayton, Ohio (Wright-Patterson Air Force Base Area)

Salary: $150,000 - $175,000 annually, based on experience, technical expertise, education, certifications, security clearance, and demonstrated ability to support the requirements of the position.

Employment Type: Full-Time

Security Clearance: Candidates must possess or be able to maintain a Department of Defense security clearance appropriate to the assigned client billet and program requirements.

Relocation Assistance: Available

Travel: Travel may be required to Government, contractor, test range, and client locations in support of program activities.

Are You the Right Fit?

LeBrun Management Solutions, LLC (LMS) is seeking an experienced Senior Cybersecurity / Supply Chain Risk Management (SCRM) Subject Matter Expert to support Department of Defense weapon system acquisition, cybersecurity, systems engineering, and Test & Evaluation (T&E) activities.

This position is designed for a senior technical professional who can connect cybersecurity and supply chain risks to the performance and mission effectiveness of complex weapon systems. The ideal candidate will bring significant experience in cybersecurity, SCRM, system security engineering, system assurance, Cyber T&E, or related disciplines, along with an understanding of the DoD acquisition and T&E environment.

The successful candidate will initially work under senior LMS direction and mentorship while progressively assuming greater responsibility for independently integrating cybersecurity, SCRM, systems engineering, and T&E evidence into mission-focused acquisition risk assessments and recommendations.

Why Join LeBrun Management Solutions?

LeBrun Management Solutions, LLC provides specialized technical, cybersecurity, program management, Test & Evaluation, and professional services supporting Government and commercial customers. Our team focuses on providing practical expertise, sound technical analysis, and decision-quality information that helps our clients manage risk and accomplish their mission.

LMS is committed to building a team of experienced professionals who can combine deep technical expertise with the ability to communicate effectively, work collaboratively, and deliver meaningful results for our clients.

Benefits

• Company-sponsored IRA with 3% company match
• Medical insurance
• Dental insurance
• Vision insurance
• Paid time off
• Relocation assistance available
• Professional development opportunities

Key Responsibilities

The Senior Cybersecurity / SCRM SME will:

• Conduct and support mission-focused cybersecurity assessments of DoD weapon systems, mission systems, software-intensive capabilities, and associated support systems.
• Identify and assess attack surfaces, trust boundaries, cyber dependencies, vulnerabilities, threat vectors, and potential mission consequences.
• Conduct or support Mission-Based Cyber Risk Assessments, Criticality Analyses, Program Protection activities, and related mission-focused cybersecurity and system assurance analyses.
• Assess cybersecurity architectures and controls, including authentication, encryption, access controls, secure boot, software and firmware update mechanisms, configuration management, vulnerability management, logging, and cyber-resiliency capabilities.
• Assess supply chain risks involving critical components, supplier and sub-tier dependencies, provenance, component authenticity, software and firmware pedigree, third-party and open-source software, development environments, and sustainment processes.
• Evaluate hardware and firmware assurance risks, including FPGA configuration and bitstream integrity, secure update processes, anti-rollback protections, device authentication, configuration provenance, and malicious insertion concerns.
• Develop or support cooperative and adversarial Cyber T&E strategies and integrate cybersecurity testing into broader Developmental Test (DT) and Operational Test (OT) activities.
• Translate cybersecurity and SCRM risks into testable hypotheses, test objectives, Measures of Performance (MOPs), Measures of Effectiveness (MOEs), test conditions, data requirements, and evaluation criteria.
• Evaluate cybersecurity, SCRM, engineering, developmental test, and operational test evidence to characterize technical significance, mission consequences, test adequacy, and residual risk.
• Prepare and review cybersecurity strategies, SCRM plans, Criticality Analyses, test strategies, test plans, technical assessments, test analyses, and reports.
• Provide cybersecurity, SCRM, and T&E expertise in support of acquisition documentation, Requests for Proposal (RFPs), Statements of Work (SOWs), Performance Work Statements (PWSs), and Contract Data Requirements Lists (CDRLs).
• Support programs involving aircraft, weapons, autonomous and uncrewed systems, sensors, electronic warfare, communications, C4ISR, and other software-intensive or emerging technologies.
• Participate in program management reviews, technical interchange meetings, test planning activities, and senior-level Government and contractor reviews.
• Prepare and present technical briefings, program management briefings, risk assessments, and written decision-support products for Government and program leadership.
• Progressively develop the capability to independently integrate cybersecurity, SCRM, systems engineering, and T&E evidence into mission-focused acquisition risk assessments and recommendations.

Required Qualifications

Candidates should possess:

• A BA/BS degree in cybersecurity, computer science, engineering, systems engineering, information technology, mathematics, or a related technical discipline with at least 12 years of relevant professional experience; or
• An MA/MS degree in a related technical discipline with at least 10 years of relevant professional experience.
• Advanced professional experience in cybersecurity, supply chain risk management, system security engineering, system assurance, Cyber T&E, or closely related technical disciplines.
• Experience supporting DoD weapon systems, mission systems, C4ISR systems, aerospace systems, autonomous systems, or other complex mission-critical systems.
• Working knowledge of DoD acquisition, systems engineering, Program Protection, Risk Management Framework (RMF), and Developmental and Operational Test principles.
• Knowledge of Criticality Analysis, supplier and sub-tier risk, provenance, software and firmware assurance, software supply chain risk, Software Bills of Materials (SBOMs), and secure update mechanisms.
• The ability to analyze cybersecurity vulnerabilities and supply chain risks and relate technical findings to system performance, mission consequences, and acquisition risk.
• Familiarity with DoD 5000-series acquisition and T&E policy and applicable NIST cybersecurity and SCRM frameworks.
• Experience developing technical documentation, risk assessments, test products, analyses, and senior-leader briefings.
• Strong oral and written communication skills.
• Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Project.

Preferred Qualifications

Highly competitive candidates will bring experience that bridges multiple technical disciplines. Preferred qualifications include:

• Significant experience across two or more of the following areas: Cybersecurity, SCRM, System Security Engineering, System Assurance, Developmental Test, Operational Test, or Cyber T&E.
• Previous experience as a senior DoD developmental tester, Chief Developmental Tester, Test Manager, systems engineer, Cyber T&E lead, Program Protection professional, or System Security Engineering professional supporting weapon-system acquisition.
• Direct experience integrating cybersecurity or SCRM considerations into Developmental Test and/or Operational Test activities.
• Experience supporting aircraft, flight-test, weapon-system, autonomous-system, or other complex DoD acquisition programs.
• Relevant cybersecurity certifications such as CISSP or equivalent.
• Defense Acquisition Credentials, certifications, or equivalent acquisition and T&E professional development.

The Ideal Candidate Will Have

• An enjoyment of solving complex technical challenges.
• The ability to lead through technical expertise and collaboration.
• Comfort advising senior acquisition leaders, mentoring junior test engineers and managers, and personally producing detailed technical products that drive successful T&E activities.
• A track record of taking ownership of deliverables from concept through completion.

Work Location: In Person – Dayton, Ohio (Wright-Patterson Air Force Base Area)

Job Type: Full-time

Pay: $150,000.00 - $175,000.00 per year

Benefits:

• Relocation assistance

Ability to Relocate:

• Dayton, OH 45440: Relocate before starting work (Required)

Work Location: In person

Salary : $150,000 - $175,000