Product Security - Supply Chain & SBOM Manager

Posted: Thursday, 27 March 2025
Valid Thru: Saturday, 26 April 2025
Index Requested on: 03/28/2025 01:29:07
Indexed on: 03/28/2025 01:29:07

Location: Shakopee, MN, 55372, US

Industry: Manufacturing - Other
Occupational Category: 11-0000.00 - Management
Type of Employment: FULL_TIME

Emerson is hiring!

Description:

If you are a professional in Software Security or Cyber Security looking for an opportunity to grow, Emerson has an opportunity for you! In either our Shakopee MN or Boulder, CO office, we are hiring for the role of Product Security - Supply Chain & SBOM Manager.

You will play a pivotal role in ensuring the security and integrity of the software supply chain across the organization. This position will focus on Software Bill of Materials (SBOM) management, secure software supply chain practices, and multi-functional collaboration to strengthen cybersecurity across all Emerson software products. While this role is deeply integrated with SDLC processes, it does not directly manage them but works closely with development, security, and operations teams to drive adoption of standard processes in secure software supply chain management.

In this Role, Your Responsibilities Will Be:

  • Lead SBOM Management Across the Organization:
    • Develop and implement SBOM policies and governance to improve software supply chain transparency.
    • Support product teams in crafting, maintaining, and analyzing SBOMs, ensuring compliance with security and regulatory requirements.
    • Provide insights on vulnerabilities, licensing risks, and component dependencies across product portfolios.
  • Enhance Secure Software Supply Chain Practices:
    • Establish and promote standard processes for securing third-party and open-source software components across Emerson’s software ecosystem.
    • Ensure alignment with emerging industry regulations, executive orders, and security frameworks (NIST SSDF, ISO 27001, IEC 62443, etc.).
    • Work closely with product security teams to identify gaps in software supply chain security and provide recommendations for improvement.
  • Collaborate with Development and Security Teams:
    • Partner with engineering, DevOps, and security teams to integrate secure software supply chain practices without redefining workflows.
    • Act as a trusted advisor on software supply chain risks, ensuring secure development and deployment practices.
  • Drive Compliance and Governance Efforts:
    • Align Emerson’s software security policies with SBOM-related regulatory requirements (e.g., U.S. Executive Order 14028, NIST guidance, and emerging global regulations).
    • Conduct security assessments to evaluate supply chain risks and help teams implement mitigation strategies.
    • Support audit readiness by providing accurate SBOM documentation and vulnerability management reports.
  • Foster a Culture of Secure Software Development:
    • Develop and deliver training programs and standard process guides on software supply chain security.
    • Stay ahead of emerging threats, attack vectors, and industry trends to continuously improve security strategies.
Who You Are:
You quickly and conclusively take actions in fact-changing, unpredictable situations. You adjust communication content and style to meet the needs of diverse collaborators. You know what motivates different people and align work accordingly. You enjoy the challenge of unfamiliar tasks. You experiment with a wide range of existing technologies while applying new and emerging options that can enhance organizational outcomes.
For This Role, You Will Need:
  • Bachelor’s degree in, Engineering, Computer Science, Software Engineering, Cybersecurity, or related field
  • Minimum of four (4) years of experience in an engineering field.
  • Minimum of two (2) years of experience in software security, software supply chain security, or related fields
  • Ability to travel up to 20%.
  • Legal authorization to work in the United States without sponsorship now or in the future.
Preferred Qualifications that Set You Apart:
  • Six (6) or more years of industry experience in software security or cybersecurity governance.
  • Certifications such as CISSP, CSSLP, CISM, or relevant software security credentials.
  • Experience with automated SBOM generation tools (e.g., CycloneDX, SPDX, Dependency-Track, or OWASP Dependency-Check).
  • Familiarity with CI/CD security tools and practices (e.g., GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, SAST, DAST, container security).
  • Knowledge of container security, software signing, and secure software distribution methods.
  • Experience in vendor risk management and third-party software assessments.

Our Culture & Commitment to You

Our compensation philosophy is simple: we pay a competitive base salary, within the local market in which we operate, and reward performance during our annual merit review process. The salary range for this role is $95, 000-$125, 000 annually, commensurate with the skills, talent, capabilities, and experience each candidate brings to a role.

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.

We recognize the importance of employee wellbeing. We prioritize providing flexible, competitive benefits plans to meet you and your family’s physical, mental, financial, and social needs. We provide a variety of medical insurance plans, with dental and vision coverage, Employee Assistance Program, 401(k), tuition reimbursement, employee resource groups, recognition, and much more. Our culture offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.

Learn more about our Culture & Values.

#LI-MS11

Responsibilities:

Please review the job description.

Educational requirements:

  • high school

Desired Skills:

Please see the job description for required or recommended skills.

Benefits:

Please see the job description for benefits.

Apply Now