Cybersecurity Compliance Facilitator

Location: New Freedom, PA (100% Onsite)

Loyal Source is seeking a Cybersecurity Compliance Facilitator to support cybersecurity readiness and compliance initiatives across a large portfolio of embedded software products. This hands-on role focuses on secure software development lifecycle (SSDLC) activities, helping engineering teams maintain compliance, improve cyber resilience, and deliver secure products.

This position supports approximately 150 products and works closely with software engineers, security professionals, product managers, and engineering leadership to ensure cybersecurity requirements are understood, tracked, and completed throughout the development lifecycle.

Pay: $53.33/hr

• Support secure software development lifecycle (SSDLC) activities across embedded software products.
• Track and monitor vulnerabilities, remediation efforts, and compliance requirements.
• Participate in threat modeling activities and security risk assessments.
• Create, manage, and maintain Software Bills of Materials (SBOMs).
• Support CVE and Known Exploited Vulnerability (KEV) analysis and reporting.
• Maintain cybersecurity documentation, project metrics, dashboards, and compliance records.
• Coordinate security backlog items and ensure timely completion of security deliverables.
• Facilitate collaboration between engineering, security, product management, and leadership teams.
• Assist with cyber resilience planning and compliance initiatives while supporting development teams in meeting security requirements.
• Track action items, remediation efforts, and security milestones across multiple projects.

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or a related field.
• 2+ years of cybersecurity, software security, or compliance-related experience.
• Knowledge of Secure Software Development Lifecycle (SSDLC) practices.
• Experience with:
  • Software Bill of Materials (SBOM)
  • Threat Modeling
  • Vulnerability Management
  • Security Documentation and Reporting
• Familiarity with security tools such as SD Elements or similar platforms.
• Strong organizational, communication, and project coordination skills.
• Ability to work onsite in New Freedom, PA.

• Experience with CVE and KEV analysis.
• Knowledge of IEC 62443, EN 62443, Cyber Resilience Act (CRA), or similar cybersecurity frameworks.
• Security+ or other cybersecurity certifications.
• Experience supporting cybersecurity compliance programs for embedded software or industrial control systems.
• Familiarity with product security, embedded systems, or operational technology environments.
• Recent graduates with a cybersecurity-focused degree and relevant internship experience are encouraged to apply.

The ideal candidate is a cybersecurity professional with experience supporting secure software development and compliance initiatives. They should be comfortable working with engineering teams to track vulnerabilities, manage SBOMs, facilitate threat modeling activities, and ensure security requirements are met without impacting delivery timelines. Experience with embedded software security, product compliance, and cybersecurity frameworks is highly desired.

Please note
: this position is notional and contingent upon the award of a government contract.

About Notional Opportunities:

Notional opportunities are roles in the planning stages and contingent on contract awards. By applying to notional positions, you can express early interest, enhancing your employment prospects and positioning yourself at the forefront of potential job opportunities. This proactive approach gives you an edge and boosts your visibility to employers, making it a strategic choice for those eager to explore…