Cybersecurity Information System Security Manager

Anduril • Irvine, CA

11h

About The Position

Anduril's Air Defense division is seeking a Cybersecurity Information System Security Manager (ISSM) to own the cybersecurity compliance posture of its command and control (C2) software systems. The role combines mission-critical software delivery with government cybersecurity accreditation and is responsible for the full cybersecurity authorization lifecycle, from policy development through artifact delivery, ensuring systems meet the security standards required for Department of Defense deployment.

The ISSM serves as the program's primary cybersecurity authority, leading the Enterprise Mission Assurance Support Service (eMASS) accreditation process, enforcing security standard operating procedures, managing Plans of Action and Milestones (POAMs), and maintaining continuous compliance across development and operational environments. The role works directly with engineers, program managers, and government stakeholders to embed security into the development lifecycle while supporting rapid software delivery.

Requirements

• United States citizenship and an active Secret or Top Secret security clearance.
• At least 5 years of experience serving as an Information System Security Officer (ISSO) or in an equivalent cybersecurity compliance role.
• At least 3 years of hands-on eMASS experience, including artifact creation, submission, and package management.
• Demonstrated experience delivering complete RMF authorization packages through to ATO.
• Strong working knowledge of NIST Special Publication 800-53, NIST 800-37, and DoD cybersecurity policies, including DoDI 8510.01.
• Experience pulling, applying, and validating STIG checklists across operating systems, applications, and network devices.
• Experience with vulnerability scanning and code analysis tools, such as Nessus, ACAS, SonarQube, Fortify, or equivalent.
• Proficiency in POAM creation, management, and closure processes.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.

Nice To Haves

• Experience with networking, communications systems, or command and control architectures.
• DoD 8570/8140 certification, such as Security+, CISSP, CISM, CAP, or equivalent.
• Experience supporting software-intensive programs using agile or DevSecOps development methodologies.
• Familiarity with container security, cloud security architectures, or zero-trust frameworks.
• Prior experience supporting air defense, missile defense, or integrated battle command systems.
• Experience working with cross-functional engineering teams in a fast-paced, iterative development environment.
• Experience with red team, blue team, or penetration testing methodologies.

Responsibilities

• Lead the development, submission, and management of government cybersecurity authorization artifacts in eMASS, including System Security Plans (SSPs), Security Assessment Reports (SARs), and supporting Authority to Operate (ATO) documentation.
• Serve as the program Information System Security Manager (ISSM), maintaining continuous monitoring activities and ensuring compliance with Risk Management Framework (RMF) requirements.
• Develop, implement, and enforce cybersecurity standard operating procedures across the program and ensure engineering teams follow security policies throughout the software development lifecycle.
• Pull, tailor, and validate applicable Security Technical Implementation Guides (STIGs), coordinating remediation with development teams.
• Manage and execute application and infrastructure code scans, triage findings, and coordinate remediation with engineering.
• Create, track, and manage POAMs, including risk assessments, mitigation strategies, and closure activities.
• Advise program leadership on cybersecurity risk posture, emerging threats, and compliance status.
• Interface with government cybersecurity stakeholders, Authorizing Officials (AOs), and Security Control Assessors (SCAs) throughout the accreditation lifecycle.
• Collaborate with software engineers to integrate security controls into continuous integration and continuous delivery (CI/CD) pipelines.

Benefits

• Highly competitive equity grants are included in the majority of full-time offers.
• Top-tier benefits for full-time employees, described as comprehensive and competitive and available at little to no cost to employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level