Senior Lead Analyst – Supply Chain Risk Management, Threat Intelligence

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver high-level technical and analytical support to the FAA’s Counterintelligence (CI) Supply Chain Risk Management (SCRM) initiative.

• Identify, evaluate, and address threats from foreign intelligence, nation-states, and cybersecurity risks affecting the FAA’s supply chain, critical infrastructure, and enterprise networks.

• Perform proactive threat assessments of foreign suppliers, third-party software developers, and hardware manufacturers to detect nation-state activities and strategic threat patterns aimed at the FAA.

• Leverage OSINT and corporate registries to screen potential FAA vendors and assess the supply chain for indicators of Foreign Ownership, Control, or Influence (FOCI), foreign partnerships, and technology transfer risks.

• Keep track of specialized threat feeds, nation-state actions, and geopolitical changes to identify, assess, and manage strategic supply chain vulnerabilities to the FAA.

• Aid the FAA Insider Risk Program by identifying and evaluating personnel issues, unusual vendor behaviors, and internal weaknesses.

• Assess threat vectors such as malicious hardware or software alterations, supply chain transit disruptions, and counterfeit electronic parts.

• Integrate complex data to create clear, actionable Supplier Threat Profiles, Country Risk Profiles, link-analysis diagrams, and timely threat alerts/advisories for FAA program managers, technical teams, and executive leaders.

⛳️ Requirements

• U.S. Citizenship is mandatory.

• Active Top Secret/SCI clearance is necessary.

• Bachelor’s or Master’s degree in Supply Chain, Intelligence Studies, National Security, Logistics, Data Science, Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related technical field.

• 12+ years of professional experience as an Intelligence Analyst (All-Source, Cyber, Counterintelligence, or Open-Source Intelligence) or senior-level expertise in third-party risk management (TPRM), Cyber Supply Chain Risk Management (C-SCRM), technical risk assessments, IT auditing, cybersecurity risk management, or infrastructure defense in a federal or highly regulated commercial setting.

• Demonstrated experience utilizing corporate registries, commercial databases, and OSINT methodologies to analyze corporate structures, trace components, and assess FOCI.

• Proficient with due diligence or corporate intelligence platforms (e.g., Sayari, Altana, Interos, Maltego) and/or data modeling techniques.

• Outstanding written and verbal communication abilities, with a proven history of converting complex intelligence and technical risk information into clear, succinct executive summaries and formal written reports for non-technical audiences, as well as presenting materials to C-suite or flag-level leadership.

🏝️ Benefits

• Competitive compensation.

• Health and Wellness programs.

• Income Protection.

• Paid Leave.

• Retirement.