Senior Supply Chain Risk Management (SCRM) Analyst/Engineer

Astrion•Arlington, VA

1d•Onsite

About The Position

Astrion is seeking a Senior Supply Chain Risk Management (SCRM) Analyst/Engineer to support mission-critical national defense and modernization efforts across the Defense and Intelligence Community. This role will provide direct support to enterprise modernization, acquisition protection, and mission assurance initiatives focused on identifying, assessing, and mitigating supply chain and technology risks across the acquisition lifecycle. The selected candidate will play a key role in integrating intelligence, cybersecurity, acquisition, and mission data to support threat-informed decision making and protection strategies for critical defense systems and emerging technologies. This position requires expertise in supply chain risk management, intelligence analysis, cyber threat assessment, and cross-functional coordination in highly dynamic national security environments.

Requirements

10+ years of experience supporting DoD, Intelligence Community, USSF, Army, or related federal organizations in intelligence, cybersecurity, supply chain risk management, or mission assurance roles.
BA or BS degree.
Active DoD TS/SCI clearance.
Experience supporting Supply Chain Risk Management (SCRM), acquisition protection, mission assurance, or technology protection programs.
Knowledge of intelligence integration, cyber threat analysis, and risk assessment methodologies.
Experience working with cross-functional teams across intelligence, acquisition, cybersecurity, and engineering communities.
Familiarity with commercial and government SCRM tools and data sources.
Strong analytical, organizational, and communication skills with the ability to brief senior leaders and stakeholders.
Advanced proficiency in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).

Nice To Haves

Experience supporting modernization protection or Intelligence Support to Acquisition (ISA) initiatives.
Knowledge of operational technology (OT), industrial control systems (ICS), or critical infrastructure cybersecurity.
Experience integrating open-source intelligence (OSINT), cyber threat intelligence, and mission/program data into enterprise risk assessments.
Familiarity with Agile methodologies and cross-functional product development environments.
Experience leading analytic development, threat characterization, or cyber risk quantification efforts.
Working knowledge of commercial SCRM and threat intelligence platforms
Experience supporting enterprise Security Operations Centers (SOC), cyber reconnaissance, or vulnerability management initiatives.
Advanced certifications such as CISSP, PMP, Certified ScrumMaster, or IC Agile certifications preferred.

Responsibilities

Support enterprise Supply Chain Risk Management (SCRM) and mission assurance initiatives for critical defense technologies and acquisition programs.
Conduct threat-informed assessments of supply chain vulnerabilities, technology risks, and mission impacts across modernization portfolios.
Integrate intelligence, cybersecurity, acquisition, and programmatic data to develop actionable risk assessments and protection strategies.
Coordinate with Defense, Intelligence Community, and acquisition stakeholders to enhance horizontal protection and technology safeguarding efforts.
Develop and maintain frameworks, processes, dashboards, and reporting mechanisms supporting enterprise risk visibility and decision-making.
Support the development and operationalization of data-driven analytic capabilities and automated risk alerting solutions.
Analyze emerging threats, foreign influence risks, cyber vulnerabilities, and adversarial targeting activities impacting critical defense systems and supply chains.
Contribute to pilot initiatives evaluating commercial technologies, intelligence capabilities, and mission assurance solutions.
Produce executive-level briefings, assessments, and recommendations for senior government and defense leadership.
Support cross-functional collaboration between cybersecurity, intelligence, acquisition, engineering, and mission operations teams to improve resilience and protection across the acquisition lifecycle.