Information Systems Security Officer, Intelligence Systems

ABOUT THE TEAM

Anduril Intelligence Systems (AIS) is focused on positioning Anduril as a lead provider of specialized engineering and products for Intelligence Community (IC) customers. We work within the IC to understand their requirements, shape their concepts of operation, and deliver exquisite capability across their problem set. We aim to develop and deploy critically needed capabilities that address our customers most pressing national security requirements.

ABOUT THE JOB

Anduril employs a variety of networks and networking infrastructures to support global operations. Information Systems Security Officers help shape classified, closed, or air gapped environments in which to deploy Anduril products or software. Well versed in a combination of Information Technology, Security and government accreditation processes, ISSOs are able to utilize their sharp critical thinking skills to balance Business Line needs, product velocity, and customer requirements.

WHAT YOULL DO

• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements. Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan.
• Perform required security functions on an iterative basis to meet requirements and deliver results.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the ISSM, fellow ISSOs, and other members of the Classified Infrastructure team to understand key stakeholders needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Andurils products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

REQUIRED QUALIFICATIONS

• Design, develop, and implement secure systems and networks adhering to NIST RMF, JSIG, DCSA, and relevant industry standards.
• Conduct security risk assessments, vulnerability assessments, and audits, including continuous monitoring, to identify and mitigate threats and ensure ongoing compliance.
• Develop and enforce technical security controls, including access controls, encryption strategies, and recommending security solutions (e.g., IDS/IPS, secure communications).
• Maintain and update accreditation documentation, including System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms), to support Authorization and Accreditation (A&A) processes and obtain/maintain Authority to Operate (ATO).
• Possess experience with monitoring Linux and Windows-based systems, fundamentals of networking, and knowledge of exploits, attacks, and attacker tools.
• Proficient with industry standard security tools and compliance resources such as Splunk, DISA STIGs, SCC, and Evaluate-STIG.
• Experience in RMF Cybersecurity (ISSM/ISSO) or a related discipline supporting classified networks, coupled with the ability to lead or assist in incident response efforts (investigation, root cause analysis, containment, reporting).
• Possess a DoD approved 8140 baseline certification (e.g., Security+, CySA+, CISSP) or a relevant Bachelor's degree.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• The ability to use programming/scripting languages (i.e. Python, PowerShell, Bash) and the use of automation to enhance the security posture of network environments.
• An understanding of Linux Red Hat operating systems and SELinux policy.
• Understanding of COMSEC / KMI.