SBOM Analyst

Our client is seeking a SBOM Analyst to join their team. As a SBOM Analyst, you will be part of the Software Asset Management (SAM) team supporting the SBOM program and day-to-day software supply chain visibility. The ideal candidate will have strong analytical skills, a collaborative mindset across technical and legal stakeholders, and the drive to turn messy component data into clear, actionable compliance and security answers.

Job Title:  SBOM Analyst

Location: 100% Remote (EST ideal)

Pay Range:  $60-$75/hr W2 (not eligible for C2C or visa sponsorship)

What's the Job?

• Help run the SBOM program day to day by shaping the process, setting standards, and continuously improving how SBOMs are collected, reviewed, and maintained.
• Collect and review SBOMs for software the organization builds and buys, checking them against NTIA Minimum Elements and identifying common gaps such as missing transitive dependencies, missing component hashes, or unclear SBOM types.
• Work with developers and DevSecOps to generate SBOMs automatically in GitLab CI/CD pipelines and maintain a versioned SBOM repository that reflects what shipped in each release.
• Clean, normalize, and connect SBOM component data (suppliers, versions, dependencies, and identifiers such as PURL, CPE, and SWID) to the correct applications, software models, and publishers.
• Support vulnerability response by helping Cybersecurity determine exposure quickly using sources such as NVD, CISA KEV, OSV, and vendor VEX statements.

What's Needed?

• 3+ years of experience in Software Asset Management, IT Asset Management, software licensing, software governance, or a closely related field.
• A solid grasp of SBOMs, software components, and how software supply chains work, including dependencies and transitive components.
• Working knowledge of open-source licensing, including the practical differences between permissive and copyleft licenses and what they require.
• Comfort reconciling inventory, usage, license, and entitlement data from multiple sources that may not agree.
• Strong communication skills to explain technical, licensing, and security findings clearly to developers, attorneys, and leadership.

What's in it for me?

• Fully remote work with a mission-critical focus on SBOM and software supply chain transparency.
• Opportunity to lead hands-on SBOM program execution within the Software Asset Management (SAM) team.
• Direct impact on compliance readiness by improving SBOM quality, normalization, and audit evidence.
• Collaboration across Application Development, DevSecOps, Enterprise Architecture, Legal, Procurement, Third-Party Risk, and Cybersecurity.
• Meaningful work that helps teams answer fast when vulnerabilities or licensing questions arise.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

If this is a role that interests you and you'd like to learn more, click apply now and a recruiter will be in touch with you to discuss this great opportunity. We look forward to speaking with you!

About ManpowerGroup, Parent Company of: Manpower, Experis, Talent Solutions, and Jefferson Wells.

ManpowerGroup® (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing, and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands – Manpower, Experis, Talent Solutions, and Jefferson Wells – creates substantial value for candidates and clients across more than 75 countries and territories and has done so for over 70 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World's Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent.