Space ISSO: Vulnerability Scanning, STIGs & SIEM Lead

Anduril Industries; Costa Mesa (CA); On-site; USD 112,000 - 149,000; Full time

Benefits offered by this job

Equity grants

Top-tier benefits

Job summary

Anduril Industries in California is seeking an ISSO to oversee day-to-day cybersecurity compliance and vulnerability management across assigned systems. You will perform scans, validate STIGs, manage access controls, investigate security events, and maintain supporting evidence for the authorization portfolio.

The role requires 2+ years in cybersecurity with DoD 8570/8140 IAT II+, hands-on experience with ACAS/Tenable and STIG workflows, and an active U.S. Top Secret clearance.

Qualifications

• 2+ years of cybersecurity or information assurance with hands-on compliance execution.
• DoD 8570/8140 compliance at IAT Level II or higher (e.g., Security+, CySA+, or CCNA Security).
• Hands-on experience with ACAS/Tenable, SCAP, SCC, or Evaluate-STIG.
• Working knowledge of DISA STIGs, NIST 800-53 security controls, and vulnerability remediation workflows.
• Experience managing user access controls and conducting account/access reviews
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance

Responsibilities

• Execute vulnerability scanning using ACAS/Tenable and coordinate remediation with IT Engineering and Networking teams within CAT I/II/III timelines.
• Apply and validate STIGs using Evaluate-STIG, SCAP, SCC, and manual review; document all findings and remediation status.
• Configure and monitor security tooling including Security Center, endpoint protection, and Splunk SIEM — investigating security events and escalating per established incident response procedures.
• Manage user access controls by enforcing least privilege and RBAC across all systems, processing account requests, and conducting regular access reviews.
• Conduct weekly audits and security configuration reviews, monitoring for atypical usage, access anomalies, and unauthorized changes per JSIG requirements.
• Maintain all security artifacts including STIG checklists, scan results, vulnerability reports, compliance matrices, and audit logs.
• Support security assessments by collecting evidence, preparing documentation, and providing technical demonstrations to assessors

Skills

Cybersecurity

DoD 8570/8140 IAT II+

ACAS/Tenable

NIST 800-53

Access control

Top Secret clearance

Tools

ACAS

Tenable

SCAP

SCC

Evaluate-STIG

Job description

Anduril Industries in California is seeking an ISSO to oversee day-to-day cybersecurity compliance and vulnerability management across assigned systems. You will perform scans, validate STIGs, manage access controls, investigate security events, and maintain supporting evidence for the authorization portfolio.

The role requires 2+ years in cybersecurity with DoD 8570/8140 IAT II+, hands-on experience with ACAS/Tenable and STIG workflows, and an active U.S. Top Secret clearance.