ISSO: Top Secret RMF/JSIG Security Lead

LinuxCareers; Costa Mesa (CA); In loco; USD 124.000 - 164.000; Tempo pieno

Descrizione del lavoro

Anduril Industries is seeking an Information System Security Officer (ISSO) in Costa Mesa, CA to serve as a hands-on security practitioner responsible for day-to-day compliance, vulnerability management, and security control documentation in classified environments.

You will implement controls per NIST RMF, JSIG and NIST 800-53, perform scans, maintain SSPs/POA&Ms, and participate in incident response and A&A processes, collaborating with government security officials.

Competenze

• Active U.S. Top Secret security clearance.
• Experience implementing security controls per NIST RMF/JSIG.
• Experience with vulnerability assessments, audits, and threat mitigation.
• Knowledge of encryption protocols and secure communications technologies.
• Ability to develop and enforce access controls and encryption strategies.

Mansioni

• Document and implement security controls to meet cybersecurity framework requirements including NIST 800-53, NIST RMF, and JSIG standards.
• Execute security scanning, validate STIGs, manage access controls, and investigate security events on an iterative basis.
• Maintain compliance evidence including SSPs, POA&Ms, and other accreditation documentation.
• Lead or assist in incident response efforts including investigation, root cause analysis, containment, and reporting.
• Collaborate with government security officials and teams to conduct continuous monitoring, risk assessments, and A&A processes.

Conoscenze

Security risk assessments

Vulnerability assessments

Incident response

Access controls

Encryption strategies

Strumenti

Splunk

DISA STIGs

SCC

Descrizione del lavoro

Anduril Industries is seeking an Information System Security Officer (ISSO) in Costa Mesa, CA to serve as a hands-on security practitioner responsible for day-to-day compliance, vulnerability management, and security control documentation in classified environments.

You will implement controls per NIST RMF, JSIG and NIST 800-53, perform scans, maintain SSPs/POA&Ms, and participate in incident response and A&A processes, collaborating with government security officials.