Information Systems Security Manager

Information Systems Security Manager based in Washington, DC, within Anduril's Classified Systems group. The ISSM supports Anduril business lines that need to field products in classified environments, heading a lean team of Information Systems Security Officers who help program staff meet contract requirements.

Day to day, the manager decides which NIST 800-53 controls apply to a given network, oversees continuous monitoring for each program, and works with program teams, security staff and system owners on the artifacts and technical answers that contracts call for. Keeping System Security Plans, POA&Ms and related accreditation files up to date, and running the Authorization and Accreditation process to secure an Authority to Operate, sit at the centre of the job. The ISSM also scans Anduril products and accredited systems, carries out audits and risk and vulnerability assessments, leads incident investigations through root cause and reporting, and designs secure systems and networks in line with NIST RMF and JSIG. Other duties include bringing commercial technology standards to air-gapped networks, building security into the development lifecycle with IT and engineering, liaising with government security officials and delivering awareness training.

An active U.S. Top Secret clearance is required. Preferred backgrounds include application security testing with SAST, DAST and SCA, securing microservices, containers and Kubernetes under DoD standards, cyber work on unmanned and ground control systems, and cloud provider security services.