Information System Security Officer

The role

You will serve as a hands-on security practitioner responsible for day-to-day compliance execution and vulnerability management across assigned systems. You will document security controls, perform security functions, and apply technology standards in classified, air-gapped environments.

What you will do

• Provide expertise in documenting security controls to meet cybersecurity framework requirements.
• Perform required security functions on an iterative basis.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the Classified Infrastructure team to understand stakeholder needs and provide technical solutions.
• Tailor NIST 800-53 controls and oversee implementation of Continuous Monitoring.
• Define, document, and conduct security scanning on products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

Required qualifications

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits.
• Recommend security solutions such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization's security posture for compliance with internal policies and external regulatory frameworks.
• Participate in the Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Assist and lead incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments.
• Collaborate with government security officials, stakeholders, and teams.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

Nice to have

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC.
• The ability to understand programming/scripting languages, i.e. Python, Powershell, Bash
• An understanding of Linux Red Hat operating systems and SELinux policy.

Benefits

• Comprehensive, competitive benefits package available at little to no cost to employees.

About the company

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. Their family of systems is powered by Lattice OS, an AI-powered operating system.