Senior Cybersecurity / Supply Chain Risk Management SME

Job Description

LeBrun Management Solutions, LLC (LMS) is seeking an experienced Senior Cybersecurity / Supply Chain Risk Management (SCRM) Subject Matter Expert to support Department of Defense weapon system acquisition, cybersecurity, systems engineering, and Test & Evaluation (T&E) activities.

\n

\n

This position is designed for a senior technical professional who can connect cybersecurity and supply chain risks to the performance and mission effectiveness of complex weapon systems. The ideal candidate will bring significant experience in cybersecurity, SCRM, system security engineering, system assurance, Cyber T&E, or related disciplines, along with an understanding of the DoD acquisition and T&E environment.

\n

\n

The successful candidate will collaborate closely with senior LMS technical leadership during the initial transition period to become familiar with program objectives, customer requirements, and established methodologies. As they become integrated into the program, they will assume increasing responsibility for independently leading technical assessments, developing recommendations, and supporting critical acquisition decisions.

\n

\n

Position Details

\n

\n
• Location: Beavercreek, Ohio
\n
• Work Arrangement: On-site at our office in Beavercreek and at WPAFB
\n
• Employment Type: Full-Time
\n

\n

\n

Why Join LeBrun Management Solutions?

\n

LeBrun Management Solutions, LLC provides specialized technical, cybersecurity, program management, Test & Evaluation, and professional services supporting Government and commercial customers. Our team focuses on providing practical expertise, sound technical analysis, and decision-quality information that helps our clients manage risk and accomplish their mission.

\n

\n

LMS is committed to building a team of experienced professionals who can combine deep technical expertise with the ability to communicate effectively, work collaboratively, and deliver meaningful results for our clients.

\n

\n

Benefits

\n

\n
• Company-sponsored IRA with 3% company match
\n
• Medical insurance
\n
• Dental insurance
\n
• Vision insurance
\n
• Paid time off
\n
• Relocation assistance available
\n
• Professional development opportunities
\n

\n

\n

Key Responsibilities

\n

The Senior Cybersecurity / SCRM SME will:

\n

\n
• Conduct and support mission-focused cybersecurity assessments of DoD weapon systems, mission systems, software-intensive capabilities, and associated support systems, identifying vulnerabilities, attack surfaces, cyber dependencies, and potential mission consequences.
\n
• Assess cybersecurity architectures, system security controls, and cyber-resiliency capabilities, including authentication, encryption, access controls, secure boot, configuration management, vulnerability management, and software/firmware update mechanisms.
\n
• Conduct or support Mission-Based Cyber Risk Assessments, Criticality Analyses, Program Protection activities, and related cybersecurity, system assurance, and acquisition risk assessments.
\n
• Evaluate supply chain security risks involving critical components, supplier dependencies, hardware and firmware assurance, software provenance, third-party software, development environments, and sustainment processes.
\n
• Develop and support cooperative and adversarial Cyber Test & Evaluation (T&E) strategies, integrating cybersecurity and SCRM considerations into Developmental Test (DT) and Operational Test (OT) activities.
\n
• Translate cybersecurity and SCRM risks into actionable test objectives, testable hypotheses, Measures of Performance (MOPs), Measures of Effectiveness (MOEs), evaluation criteria, and technical recommendations.
\n
• Analyze cybersecurity, SCRM, systems engineering, and T&E evidence to evaluate technical significance, mission impact, test adequacy, and residual acquisition risk.
\n
• Develop and review technical documentation, including cybersecurity strategies, SCRM plans, test plans, risk assessments, acquisition documentation, technical analyses, and decision-support reports.
\n
• Collaborate with Government and contractor stakeholders through technical reviews, program management meetings, and senior-level briefings, progressively assuming greater responsibility for independently developing mission-focused risk assessments and recommendations.
\n

\n

\n

Required Qualifications

\n

Candidates should possess:

\n

\n
• A BA/BS degree in cybersecurity, computer science, engineering, systems engineering, information technology, mathematics, or a related technical discipline with at least 12 years of relevant professional experience ; or
\n
• An MA/MS degree in a related technical discipline with at least 10 years of relevant professional experience .
\n
• Advanced professional experience in cybersecurity, supply chain risk management, system security engineering, system assurance, Cyber T&E, or closely related technical disciplines.
\n
• Experience supporting DoD weapon systems, mission systems, C4ISR systems, aerospace systems, autonomous systems, or other complex mission-critical systems.
\n
• Working knowledge of DoD acquisition, systems engineering, Program Protection, Risk Management Framework (RMF), and Developmental and Operational Test principles.
\n
• Knowledge of Criticality Analysis, supplier and sub-tier risk, provenance, software and firmware assurance, software supply chain risk, Software Bills of Materials (SBOMs), and secure update mechanisms.
\n
• The ability to analyze cybersecurity vulnerabilities and supply chain risks and relate technical findings to system performance, mission consequences, and acquisition risk.
\n
• Familiarity with DoD 5000-series acquisition and T&E policy and applicable NIST cybersecurity and SCRM frameworks.
\n
• Experience developing technical documentation, risk assessments, test products, analyses, and senior-leader briefings.
\n
• Strong oral and written communication skills.
\n

\n

\n

Preferred Qualifications

\n

Highly competitive candidates will bring experience that bridges multiple technical disciplines. Preferred qualifications include:

\n

\n
• Significant experience across two or more of the following areas: Cybersecurity, SCRM, System Security Engineering, System Assurance, Developmental Test, Operational Test, or Cyber T&E .
\n
• Previous experience as a senior DoD developmental tester, Chief Developmental Tester, Test Manager, systems engineer, Cyber T&E lead, Program Protection professional, or System Security Engineering professional supporting weapon-system acquisition.
\n
• Direct experience integrating cybersecurity or SCRM considerations into Developmental Test and/or Operational Test activities.
\n
• Experience supporting aircraft, flight-test, weapon-system, autonomous-system, or other complex DoD acquisition programs.
\n
• Relevant cybersecurity certifications such as CISSP or equivalent .
\n
• Defense Acquisition Credentials, certifications, or equivalent acquisition and T&E professional development.
\n

\n

\n

The Ideal Candidate Will Have

\n

\n
• An enjoyment of solving complex technical challenges.
\n
• The ability to lead through technical expertise and collaboration.
\n
• Comfort advising senior acquisition leaders, mentoring junior test engineers and managers, and personally producing detailed technical products that drive successful T&E activities.
\n
• A track record of taking ownership of deliverables from concept through completion.
\n