Information System Security Officer

A hands-on information system security officer on Anduril's Classified Infrastructure team in Costa Mesa, handling day-to-day compliance and vulnerability management for classified and air-gapped systems where Anduril deploys its products. The ISSO runs scans, validates STIGs, manages access controls, investigates security events, tailors NIST 800-53 controls, oversees continuous monitoring, maintains SSPs and POA&Ms for authorisation, and helps shape product features to meet compliance goals.

It requires experience securing systems under NIST RMF and JSIG, risk and vulnerability assessments, ATO processes, incident response, and an active Top Secret clearance; Splunk, STIG and SCC tools, scripting and Red Hat with SELinux are preferred.