Software Supply Chain Analyst

# Software Supply Chain Analyst Fortress Information Security Full Time intern Patuxent, Maryland, USPosted Yesterday##

Role Overview Fortress Information Security is hiring a internship Software Supply Chain Analyst. This is a full-time role in Patuxent. Part of Fortress Information Security's Risk hiring, posted yesterday. Full responsibilities, required qualifications, and the apply link are listed in the description below.## Resume Keywords to Include Make sure these keywords appear in your resume to improve ATS scoring

ExcelORADASupply Chain Compensation Benefits Onboarding Location Sign  up free to auto-tailor your resume with all these keywords and get a higher ATS score##

Job Description

Location:

Onsite - Patuxent River, MD Compensation: $55,271 - $75,369

Employment Type:

Full-Time Clearance Requirement:
Active Security Clearance required

Travel Requirement:
Some travel less than 15%
What you can expect as the Software Supply Chain Analyst at Fortress...The Software Supply Chain Analyst will support Government Delivery operations at Fortress by performing detailed, manual review and documentation of software component information from Software Bills of Materials (SBOMs) in a SCIF environment at Patuxent River. This role is critical to fulfilling immediate Navy customer requirements for processing Secret-level SBOMs while Fortress develops automation for this process.

Designed for a detail-oriented professional with an active Secret clearance, the position offers a clear growth path into broader Government Delivery responsibilities — including analysis support, documentation, brief preparation, and coordination with internal delivery teams - as manual processes become automated. It is an ideal opportunity for someone early in their cybersecurity or government delivery career who is eager to learn software supply chain risk concepts and contribute to high-impact federal programs.

Responsibilities Include
* Analyze SBOMs and related software component information in a SCIF environment to identify and document relevant software components.
* Manually record and evaluate open-source components and related component details accurately, consistently, and in accordance with Fortress process requirements.
* Exercise independent judgement when reviewing unclear, incomplete, or higher-risk SBOM data.
* Support operational decision-making by preparing clear findings, summaries, trackers, and briefing materials.
* Learn Fortress's internal SBOM terminology, workflows, risk concepts, and delivery expectations during onboarding and early ramp.
* Identify basic software supply chain risk indicators and escalate potential concerns to senior team members or subject matter experts for review.
* Improve SBOM review workflows by identifying ways to increase accuracy, consistency, and efficiency.
* Create and maintain accurate working files, trackers, notes, and documentation using Excel and Microsoft 365 tools.
* Coordinate with internal team members and customer representatives regarding findings, documentation needs, and follow-up actions. Prepare internal updates, customer briefs, and Government Delivery materials using Excel, PowerPoint, and Microsoft 365 tools.
* Communicate progress, questions, blockers, completed work, and recommendations clearly to the manager and project team. Work onsite at Patuxent River and comply with all SCIF, security, customer, and Fortress requirements.
* Exercise independent judgment in prioritizing analytical efforts, interpreting customer requirements, and recommending risk mitigation or documentation approaches that support program objectives.
* Adapt to changing work assignments as SBOM review processes become automated and broader Government Delivery support needs evolve.
* Other duties as assigned

Minimum Qualifications
* Active Secret clearance required.
* U.S. citizenship required due to active clearance and government customer requirements.
* Ability to work onsite at Patuxent River and perform work in a SCIF environment.
* 0–2 years of professional experience in cybersecurity, software, data analysis, technical documentation, government support, supply chain risk, or a related…