Cybersecurity Information System Security Manager

Owns the cybersecurity compliance of command and control software in Anduril's Air Defense division as the program's Information System Security Manager. The division builds networked sensors and effectors that detect, track and defeat unmanned aircraft threats, and the ISSM is the program's main cybersecurity authority, working with engineers, program managers and government stakeholders.

The role runs the full authorisation lifecycle in eMASS, from System Security Plans and Security Assessment Reports to the documents needed for an Authority to Operate, and keeps continuous monitoring in step with RMF requirements. It writes and enforces security procedures for engineering teams, tailors and validates STIGs, runs application and infrastructure code scans and coordinates fixes, and manages Plans of Action and Milestones. The ISSM also advises program leadership on risk, works with Authorizing Officials and Security Control Assessors, and helps engineers build security controls into CI/CD pipelines, keeping pace with fast software delivery.

Anduril wants US citizenship with an active Secret or Top Secret clearance, five or more years as an ISSO or in a similar compliance role, at least three years hands-on with eMASS, and a record of taking RMF packages through to ATO. Knowledge of NIST 800-53 and 800-37, DoDI 8510.01, STIGs, scanning tools such as Nessus or Fortify, and a relevant bachelor's degree are required. DoD 8570/8140 certification, DevSecOps experience and an air or missile defense background are preferred. The role is based in Irvine, California.