Information Systems Security Manager, Space

Senior security authority for Anduril's Space team, which builds hardware and software, including Lattice for Space Missions and modular payloads, that give U.S. and allied militaries awareness and control in orbit. The ISSM leads Risk Management Framework and assessment and authorization work at every classification level and supervises the team's ISSOs.

The manager owns the authorization portfolio: driving ATO, IATT and IATO packages, maintaining System Security Plans, Security Assessment Reports and POA&Ms, and making sure remediation lands on time. Continuous monitoring sits here too, from scanning and risk assessment to checking accounts and reviewing who has access at each protection level, so that IT engineering and network infrastructure stay hardened and compliant. The ISSM coordinates control assessments with validators, SCAs and Authorizing Officials, acts as the team's technical security contact for government bodies such as DISA, NSA and DIA, leads incident response when events need investigation, runs GRC platforms and evidence tracking, and briefs leadership and customers on authorization status and risk decisions. Setting expectations for and mentoring ISSOs is part of the job.

The posting asks for five or more years of cybersecurity or information assurance work that includes hands-on RMF and A&A, DoD 8570/8140 IAM Level II certification such as CISSP, CISM, CASP+ or CAP, and authorization packages across classification levels. Knowledge of NIST 800-53 and CNSSI 1253 is expected, and an active Top Secret clearance is required. Space program experience, eMASS or Xacta, and DISA STIGs are pluses. Based in Costa Mesa.