Information System Security Officer

Anduril Industries; Costa Mesa (CA); Presencial; USD 124.000 - 164.000; Jornada completa

Descripción de la vacante

Anduril Industries is seeking an Information System Security Officer (ISSO) in Costa Mesa, CA to serve as a hands-on security practitioner responsible for day-to-day compliance, vulnerability management, and security control documentation in classified environments.

You will implement controls per NIST RMF, JSIG and NIST 800-53, perform scans, maintain SSPs/POA&Ms, and participate in incident response and A&A processes, collaborating with government security officials.

Formación

• Active U.S. Top Secret security clearance.
• Experience implementing security controls per NIST RMF/JSIG.
• Experience with vulnerability assessments, audits, and threat mitigation.
• Knowledge of encryption protocols and secure communications technologies.
• Ability to develop and enforce access controls and encryption strategies.

Responsabilidades

• Document and implement security controls to meet cybersecurity framework requirements including NIST 800-53, NIST RMF, and JSIG standards.
• Execute security scanning, validate STIGs, manage access controls, and investigate security events on an iterative basis.
• Maintain compliance evidence including SSPs, POA&Ms, and other accreditation documentation.
• Lead or assist in incident response efforts including investigation, root cause analysis, containment, and reporting.
• Collaborate with government security officials and teams to conduct continuous monitoring, risk assessments, and A&A processes.

Conocimientos

Security risk assessments

Vulnerability assessments

Incident response

Access controls

Encryption strategies

Herramientas

Splunk

DISA STIGs

SCC

Descripción del empleo

Anduril Industries is a defense technology company building AI-powered military systems. This role is an Information System Security Officer (ISSO) who serves as a hands-on security practitioner responsible for day-to-day compliance execution, vulnerability management, and security control documentation across assigned systems in classified or air-gapped environments.

What You'll Do

• Document and implement security controls to meet cybersecurity framework requirements including NIST 800-53, NIST RMF, and JSIG standards
• Execute security scanning, validate STIGs, manage access controls, and investigate security events on an iterative basis
• Maintain compliance evidence including System Security Plans (SSPs), POA&Ms, and other accreditation documentation
• Lead or assist in incident response efforts including investigation, root cause analysis, containment, and reporting
• Collaborate with government security officials and teams to conduct continuous monitoring, risk assessments, and Authorization and Accreditation (A&A) processes

What You Need

• Currently possess and maintain an active U.S. Top Secret security clearance
• Expertise in designing, developing, and implementing secure systems and networks per NIST RMF, JSIG, and industry standards
• Experience with security risk assessments, vulnerability assessments, audits, and threat mitigation
• Knowledge of security solutions including IDS/IPS, encryption protocols, and secure communications technologies
• Ability to develop and enforce access controls, encryption strategies, and other technical security measures

Nice to Have

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC
• Understanding of programming/scripting languages including Python, PowerShell, and Bash
• Familiarity with Linux Red Hat operating systems and SELinux policy

Base salary $124,000–$164,000 USD; highly competitive equity grants included in majority of full-time offers; top-tier benefits package including health, recovery, and other support