Information Systems Security Engineer

Chaos Industries; Los Angeles (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health benefits including medical, 24/

401k with company match

Relocation assistance

Annual bonuses (coming soon)

Job summary

CHAOS Industries is seeking an experienced Information System Security Engineer (ISSE) to lead security engineering for classified information systems across ATO boundaries. You will own security architecture from initial design through A&A and ongoing continuous monitoring.

Responsibilities include RMF-aligned architecture, risk analysis, vulnerability management, and STIG/SRG hardening. Candidates should have TS/SCI eligibility and relevant DoD certifications, with a strong cloud security

Qualifications

• Minimum Bachelor’s degree plus 7 years of Information Assurance / Information System Security experience.
• Master’s degree and 5 years of relevant experience.
• DoD 8140 Cyber Workforce IAT Level 2 or IAM level 1 certification.
• Strong knowledge of RMF , STIGs, system hardening, network security, secure architecture, and vulnerability management processes.
• Active Top Secret Clearance with SCI eligibility.

Responsibilities

• Design and document system security architecture for classified and unclassified information systems across RMF/DoD overlays.
• Conduct and review security assessments; perform risk analysis and vulnerability scans to identify/remediate risks.
• Oversee CM process; approve/reject changes for security impact; ensure STIG/SRG hardening across Windows, Linux, and network infrastructure.
• Run and interpret vulnerability scans; drive remediation with engineering teams; monitor continuous monitoring post-ATO.
• Architect, design, implement, support, and evaluate security-focused tools and services; develop security policies and procedures.
• Experience with cloud security in production environments and in development/QA/staging environments.
• Ensure compliance with DCSA, DSS, and IC security policies across programs.

Skills

Security architecture

RMF & NIST

A&A processes

Vulnerability management

Incident response

Cloud security

DoD 8140

STIG & SCAP

Hardening practices

Clearance: TS/SCI

Education

Bachelor’s degree

Master’s degree

Tools

Nessus

ACAS

SCAP

Job description

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com .

Role Overview

CHAOS Industries seeks an experienced Information System Security Engineer (ISSE) to serve as the primary security engineer for classified Information systems across one or more Program Security Authorization boundaries. The ISSE will take full ownership of the security engineering effort for our next generation classified processing environment – from initial system security architecture through Assessment and Authorization ( A&A ) and into sustained continuous monitoring once the system reaches Authority to Operate (ATO).

Responsibilities

Security Engineering & Architecture

Design and document system security architecture for classified and unclassified Information Systems, ensuring alignment with RMF ( NIST 800-37), ICD 503, and applicable DoD / IC overlays.

Conduct and review security assessments, maintain system patches, risk analysis, and vulnerability scans (Nessus, ACAS , SCAP ) to identify and remediate risks.

Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.

Oversee implementation and validation of STIG / SRG hardening requirements across Windows, Linux, and network infrastructure.

Vulnerability Management and Continuous Monitoring

Run and interpret vulnerability scans ( ACAS , SCAP or equivalent tools), triage findings, and drive remediation with the responsible engineering teams.

Maintain the system’s continuous monitoring strategy post- ATO, including tracking control effectiveness overtime and flagging drift.

Support incident response for accredited systems, including root-cause security analysis and reporting.

Assessment & Authorization ( A&A )

Architect, design, implement, support, and evaluate, security-focused tools, and services.

Develop and interpret security policies and procedures.

Experience with cloud security platforms in a production environment, as well as development, quality-assurance and staging environments.

Ensure compliance with DCSA , DSS , and applicable IC community security policies across all assigned programs.

Minimum Bachelor’s degree plus 7 years of Information Assurance / Information System Security experience.

Master’s degree and 5 years of relevant experience.

Possess a DoD 8140 Cyber Workforce IAT Level 2 or IAM level 1 certification

Strong knowledge of RMF , STIGs, system hardening, network security, secure architecture, and vulnerability management processes.

Experience working across hardware, software, networking, and mission system integration environments.

Active Top Secret Clearance with SCI eligibility

Preferred Requirements

Experience supporting military aircraft, mission systems, CUAS , or tactical communication platforms.

Background supporting cybersecurity test events, airworthiness, or platform accreditation activities.

Strong knowledge in major cloud environments.

Why CHAOS

• Health Benefits: Medical, dental, and vision benefits 100% paid for by the company
• Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more
• Our Perks: Free daily lunch while you're working onsite, fully-stocked kitchen, unlimited PTO, casual dress code
• Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses
• Team Growth: 500+employees and counting across 5 global offices

$150,000 - $190,000

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.

Please note this position does not necessarily require eligibility to obtain and maintain a U.S. security clearance.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in CHAOS Industries’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.