Cybersecurity Information System Security Manager
Anduril Industries · Irvine, California, United States
About this role
**Cybersecurity Information System Security Manager (ISSM)** **About Anduril** Anduril Industries is a defense technology company on a mission to transform U.S. and allied military capabilities with advanced technology. Anduril’s family of systems is powered by **Lattice OS**, an AI-powered operating system that turns thousands of data streams into a real-time, 3D command and control center. **About the Team** The **Air Defense** team builds robots that find other robots and knock them out of the sky. The team delivers mission-critical capabilities across the kill chain—**detection, tracking, identification, deterrence, and defeat**—through a family of networked sensors and effectors. **About the Job** Anduril’s Air Defense division is seeking a **Cybersecurity Information System Security Manager (ISSM)** to own the **cyber compliance posture** of **command and control (C2) software systems**. This role sits at the intersection of mission-critical software delivery and **government cybersecurity accreditation**. You will be responsible for building and maintaining the full cybersecurity authorization lifecycle—from **policy development through artifact delivery**—to ensure systems meet Department of Defense security standards. You will serve as the primary cybersecurity authority for your program, driving the end-to-end **eMASS** accreditation process, enforcing security SOPs, managing **POAMs**, and ensuring continuous compliance across development and operational environments. --- ### What You’ll Do - Lead the development, submission, and management of government cybersecurity authorization artifacts in **eMASS** (including **SSPs**, **SARs**, and supporting documentation for **ATO**) - Serve as the program **ISSM**, maintaining continuous monitoring and ensuring compliance with **RMF** requirements - Develop, implement, and enforce cybersecurity **standard operating procedures** across the program - Pull, tailor, and validate applicable **STIGs**, coordinating remediation with development teams - Manage and execute application and infrastructure **code scans**, triaging findings and coordinating remediation - Create, track, and manage **Plans of Action and Milestones (POAMs)**, including risk assessments, mitigation strategies, and closure - Advise program leadership on cybersecurity risk posture, emerging threats, and compliance status - Interface directly with government cybersecurity stakeholders, **Authorizing Officials (AOs)**, and **Security Control Assessors (SCAs)** - Collaborate with software engineers to integrate security controls into **CI/CD** pipelines --- ### Required Qualifications - **U.S. citizenship** with an active **Secret** or **Top Secret** security clearance - Minimum **5 years** experience as an **Information System Security Officer (ISSO)** or equivalent cybersecurity compliance role - Minimum **3 years** hands-on experience with **eMASS** (artifact creation, submission, package management) - Demonstrated experience delivering complete **RMF authorization packages** through to **ATO** - Strong working knowledge of **NIST SP 800-53**, **NIST 800-37**, and **DoD cybersecurity policies (DoDI 8510.01)** - Experience pulling, applying, and validating **STIG checklists** across operating systems, applications, and network devices - Experience with vulnerability scanning and code analysis tools (e.g., **Nessus, ACAS, SonarQube, Fortify**, or equivalent) - Proficiency in **POAM** creation, management, and cl
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.