Information Systems Security Manager
Anduril Industries · Costa Mesa, California, United States
About the role
Information Systems Security Manager in Anduril's Classified Systems group, supporting business lines that want to deploy Anduril products into classified environments. ISSMs lead small teams of Information Systems Security Officers and drive those deployments, helping program staff produce what their contracts require.
The manager tailors NIST 800-53 controls to each network, coordinates security artifacts with program and security teams, and keeps System Security Plans, POA&Ms and other accreditation records current while steering systems through authorization to win and keep an ATO. The job also covers security scanning of products and accredited systems, continuous monitoring, risk and vulnerability assessments, and leading investigation and reporting when incidents occur. Beyond documentation, the ISSM designs secure systems and networks under NIST RMF and JSIG, brings commercial practice into air-gapped environments, works security into the SDLC with IT and engineering, and shapes product features so they meet compliance goals. Working with government security officials, running awareness training and mentoring the team round out the role.
Candidates must already hold an active U.S. Top Secret clearance and be able to keep it. Experience with SAST, DAST and SCA tooling, securing microservices, containers and Kubernetes to DoD standards, unmanned and ground control systems, and cloud provider security services is preferred. Based in Costa Mesa, California.