PC
Senior Cybersecurity manager
Pyramid Consulting, Inc
- 🇺🇸 United States
- On-site
- Manager or above
- 23 hours ago
- CI/CD
- AppSec
- Threat Intelligence
- Vulnerability Management
- Microservices
- AWS
- Azure
- GCP
- Threat Modeling
- GSEC
- CISSP
- CSSLP
- Health insurance
- Pension
23 hours ago
Job ID:26-32667
Pay Range: $99 - $100/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).
Key Responsibilities:
- Lead end-to-end SBOM program implementation, including collection, ingestion, analysis, remediation, and continuous monitoring.
- Define governance, standards, and enforcement mechanisms for SBOMs across vendors and internal applications.
- Establish risk scoring methodologies for software components, libraries, and dependencies.
- Drive integration of SBOM processes into procurement, onboarding, and vendor lifecycle management.
- Embed SBOM generation and validation into CI/CD pipelines and SDLC processes.
- Collaborate with AppSec teams to identify vulnerable components and supply chain attack risks.
- Own the implementation and tuning of SBOM tooling platforms, overseeing ingestion pipelines for SBOM formats (e.g., SPDX, Cyclone DX).
- Correlate SBOM data with vulnerability intelligence (e.g., CVE, VEX) to identify risk exposure.
- Establish contractual SBOM requirements and lead remediation engagement with vendors on vulnerable software components.
- Integrate SBOM outputs into continuous monitoring and detection workflows, aligning with SOC and Threat Intelligence teams.
- Define KPIs, metrics, and reporting dashboards for executive visibility, moving beyond questionnaire-based vendor risk assessments.
- 10+ years of cybersecurity experience with a focus on application security or software supply chain risk.
- Strong expertise in secure SDLC, CI/CD pipelines, and application architecture.
- Hands-on experience with SBOM standards (SPDX, Cyclone DX) and vulnerability management.
- Proven experience leading security programs or teams.
- Deep understanding of open-source risk and dependency management, modern software architectures (microservices, APIs, containers), and cloud platforms (AWS, Azure, GCP).
- Experience in threat modeling and application security testing.
- Ability to translate technical risk into business impact and influence senior stakeholders.
- Experience with SCA tools or dependency scanning.
- Knowledge of VEX, vulnerability exploitability scoring, and threat intelligence integration.
- Experience working with software composition analysis (SCA) tools.
- Strong communication skills with the ability to influence engineering, procurement, and executive teams.
- Certifications such as Security+, GSEC, CISSP, CSSLP, or similar.
- Experience in financial services or regulated environments.
Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.
#cha
Senior Cybersecurity manager · Pyramid Consulting, Inc