Information System Security Officer

Anduril • Costa Mesa, CA

5d

About The Position

The Information System Security Officer (ISSO) is the hands-on security practitioner responsible for day-to-day compliance execution and vulnerability management across assigned systems. The role supports classified, closed, or air-gapped environments by balancing business-line needs, product velocity, and customer requirements. The ISSO conducts security scans, validates STIGs, manages access controls, investigates security events, and maintains compliance evidence supporting the team's authorization portfolio. The position also documents and implements security controls, applies commercial technology standards in classified environments, and supports product and system compliance goals.

Requirements

• Design, develop, and implement secure systems and networks according to NIST RMF, JSIG, and other industry standards.
• Participate in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Ability to speak to and recommend security solutions, including IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical safeguards.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage security posture and ensure compliance with internal policies and external regulatory frameworks.
• Participate in Authorization and Accreditation (A&A) processes to obtain or maintain system Authority to Operate (ATO).
• Ability to assist with or lead incident response, including investigation, root-cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Currently possess and be able to maintain an active U.S. Top Secret security clearance.

Nice To Haves

• Experience with industry-standard tools such as Splunk, DISA STIGs, and SCC.
• Ability to understand programming or scripting languages such as Python, PowerShell, and Bash.
• Understanding of Linux Red Hat operating systems and SELinux policy.

Responsibilities

• Document security controls applicable to assigned systems to meet cybersecurity framework requirements.
• Perform recurring security functions to meet requirements and deliver results.
• Apply commercial technology standards in classified, air-gapped environments.
• Assist the Senior Information Security Analyst, other Information Security Analysts, and Classified Infrastructure team members in understanding stakeholder needs and delivering technical solutions that meet contractual obligations.
• Tailor NIST 800-53 controls to the network environment and oversee continuous monitoring for assigned programs.
• Define, document, and conduct security scanning on products and accredited information systems.
• Scope, shape, and coordinate development of features to ensure products meet compliance goals.
• Design, develop, and implement secure systems and networks in accordance with NIST RMF, JSIG, and other industry standards.
• Participate in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Recommend security solutions such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical safeguards.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage security posture and ensure compliance with internal policies and external regulatory frameworks.
• Participate in Authorization and Accreditation (A&A) processes to obtain or maintain system Authority to Operate (ATO).
• Assist with or lead incident response, including investigation, root-cause analysis, containment, and reporting.
• Conduct audits, continuous monitoring, and risk assessments to support ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.

Benefits

• Highly competitive equity grants are included in the majority of full-time offers and are considered part of total compensation.
• Top-tier benefits for full-time employees, including a comprehensive, competitive benefits package available at little to no cost to employees.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed