Senior ISSM - Classified Defense Security Lead

Anduril-1; Washington (District of Columbia); On-site; USD 146,000 - 194,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

Job summary

Anduril Industries in Washington, DC seeks an Information Systems Security Manager to lead security programs for classified deployments, aligning with RMF/JSIG and driving ATO activities across programs.

You will manage risk, incident response, continuous monitoring, and security scanning, mentor a security team, and ensure compliance with DoD standards while maintaining an active TS clearance.

Qualifications

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Integrate security best practices into Anduril's Software Development Lifecycle (SDLC) and infrastructure design, collaborating with internal IT and engineering teams.
• Conduct security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Recommend and implement security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Security Management (ISSM): Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Oversee Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Lead incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Develop and deliver security awareness training and ensure adherence to security best practices.
• Provide leadership and mentorship to security team members, fostering a culture of cybersecurity excellence.

Responsibilities

• Provide expertise in documenting security controls to reduce the administrative cost of deploying Anduril's products into operational environments.
• Partner with program and security teams to coordinate security artifacts in support of classified deployments.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Collaborate with Information System Owners to understand key stakeholders' needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Anduril's products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

Skills

NIST RMF

JSIG

Security SDLC

Threat assessment

Access controls

Vulnerability management

Incident response

A&A

Tools

IDS/IPS

Encryption

Secure communications

Job description

Anduril Industries in Washington, DC seeks an Information Systems Security Manager to lead security programs for classified deployments, aligning with RMF/JSIG and driving ATO activities across programs.

You will manage risk, incident response, continuous monitoring, and security scanning, mentor a security team, and ensure compliance with DoD standards while maintaining an active TS clearance.