ISSO: Classified Systems Security & Compliance

Anduril Industries, Inc.; Costa Mesa (CA); On-site; USD 124,000 - 164,000; Full time

Job summary

Anduril Industries, Inc. is seeking an on-site Information Security Officer (ISSO) to lead day-to-day security, compliance execution, and vulnerability management across assigned systems. You will run scans, validate STIGs, manage access controls, investigate security events, and maintain compliance evidence for authorization portfolios.

The ideal candidate will have active U.S. Top Secret clearance and hands-on experience with NIST RMF, JSIG, and continuous monitoring in classified

Qualifications

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits.
• Speak to and recommend security solutions, such as IDS/IPS, encryption protocols, and secure communications.
• Develop and enforce access controls, encryption strategies, and other technical measures.
• Maintain and update SSPs, POA&Ms, and other accreditation documentation.
• Manage security posture in line with internal policies and external regulations.
• Assist/lead incident response, including investigation and containment.

Responsibilities

• Provide expertise in documenting security controls to meet framework requirements.
• Perform iterative security functions to meet requirements.
• Apply standards to classified, air-gapped environments.
• Collaborate with teammates to meet contractual obligations.
• Tailor controls and oversee Continuous Monitoring.
• Define and conduct security scanning on products and systems.
• Shape features to meet compliance goals.

Skills

NIST RMF

JSIG

Security controls

Incident response

Vulnerability management

Tools

Splunk

DISA STIGs

SCC

Job description

Anduril Industries, Inc. is seeking an on-site Information Security Officer (ISSO) to lead day-to-day security, compliance execution, and vulnerability management across assigned systems. You will run scans, validate STIGs, manage access controls, investigate security events, and maintain compliance evidence for authorization portfolios.

The ideal candidate will have active U.S. Top Secret clearance and hands-on experience with NIST RMF, JSIG, and continuous monitoring in classified