Information System Security Officer
Anduril Industries · Costa Mesa, California, United States
About this role
**Information System Security Officer (ISSO) — Anduril Industries** ## About Anduril Anduril Industries is a defense technology company on a mission to transform U.S. and allied military capabilities with advanced technology. Anduril’s family of systems is powered by **Lattice OS**, an AI-powered operating system that turns thousands of data streams into a real-time, 3D command and control center. ## About the Team Information Security Analysts help shape **classified, closed, or air-gapped environments** to deploy Anduril products or software. They combine Information Technology, Security, and government accreditation processes to balance business line needs, product velocity, and customer requirements. ## About the Job As the **ISSO**, you’ll be a hands-on security practitioner responsible for **day-to-day compliance execution** and **vulnerability management** across assigned systems. You’ll run scans, validate STIGs, manage access controls, investigate security events, and maintain the compliance evidence that supports the team’s authorization portfolio. ## What You’ll Do - Document security controls that apply to respective systems to meet cybersecurity framework requirements - Perform required security functions iteratively to meet requirements and deliver results - Apply technology standards from the commercial space in classified, air-gapped environments - Partner with the Senior Information Security Analyst and Classified Infrastructure team to deliver complex technical solutions aligned to stakeholder needs and contractual obligations - Tailor **NIST 800-53** controls for applicability and oversee **Continuous Monitoring** for respective programs - Define, document, and conduct security scanning on Anduril products and accredited information systems - Scope, shape, and orchestrate feature development to ensure products meet compliance goals ## Required Qualifications - Design, develop, and implement secure systems and networks per **NIST RMF**, **JSIG**, and other industry standards - Support security risk assessments, vulnerability assessments, and audits to identify and mitigate threats - Recommend security solutions (e.g., **IDS/IPS**, encryption protocols, secure communications technologies) - Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems - Maintain and update **System Security Plans (SSPs)**, **POA&Ms**, and other accreditation documentation - Manage organizational security posture to ensure compliance with internal policies and external regulatory frameworks - Participate in **Authorization and Accreditation (A&A)** processes to obtain/maintain system **Authority to Operate (ATO)** - Assist (or lead) incident response efforts including investigation, root cause analysis, containment, and reporting - Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and resilience - Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls - Currently possess and be able to maintain an active **U.S. Top Secret** security clearance ## Preferred Qualifications - Experience with tools such as **Splunk**, **DISA STIGs**, and **SCC** - Ability to understand programming/scripting languages (e.g., **Python**, **PowerShell**, **Bash**) - Understanding of **Linux Red Hat** and **SELinux** policy ## Salary Range **$124,000 – $164,000 USD** (base salary estimate; equity and
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.