Senior Information Systems Security Officer, NGC2

The role

You will serve as a hands-on security practitioner responsible for day-to-day compliance execution and vulnerability management across a cloud-native platform. You will manage CVE remediation, review vendor security artifacts, and maintain authorization documentation in eMASS.

What you will do

• Track and coordinate CVE remediation across all program environments
• Review third-party vendor onboarding security packages
• Validate STIG compliance using SCAP and Evaluate-STIG
• Manage and audit user access controls through the platform's role-based permission model
• Monitor security events through coordination with the program's Cybersecurity Service Provider
• Maintain all security artifacts in eMASS
• Review platform Change Requests for security impact
• Support RMF activities including security control assessments and ATO package preparation
• Conduct weekly CVE expiry reviews
• Assist with ISA development and review for system interconnections

Required qualifications

• 5+ years of experience in cybersecurity or information assurance with hands-on compliance execution in a DoD environment
• DoD 8570/8140 compliance at IAT Level II or higher (e.g., Security+, CySA+, or CCNA Security)
• Working knowledge of NIST 800-53 security controls, DISA STIGs, and RMF processes
• Experience with vulnerability scanning tools and CVE remediation tracking workflows
• Experience managing user access controls and conducting account/access reviews
• Currently possesses and is able to maintain an active U.S. Secret security clearance

Nice to have

• Experience with container security scanning (Trivy, Grype, or similar) in Kubernetes environments
• Familiarity with cloud PaaS platforms in a DoD context (IL2 through IL6)
• Experience with eMASS for RMF package management and continuous monitoring
• Hands-on experience reviewing third-party vendor security artifacts (SBOMs, SAST/DAST reports, POA&Ms) for onboarding decisions
• Familiarity with Cross-Domain Solutions and multi-enclave environments
• CompTIA CySA+, CEH, or GIAC certifications

Benefits

• Comprehensive, competitive benefits package available at little to no cost to employees

Before you apply

• Must currently possess and be able to maintain an active U.S. Secret security clearance
• Consent to pre-employment risk, integrity, and due diligence screening

About the company

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. Their family of systems is powered by Lattice OS, an AI-powered operating system.