# Information Systems Security Manager

**Company**: Anduril Industries
**Location**: Costa Mesa, California
**Experience**: senior
**Job type**: full-time
**Salary**: $146,000-$194,000 USD
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/andurilindustries/jobs/5048775007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_15a64f79-4ea

## Description

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology.

## Job Summary

As an Information Systems Security Manager, you will lead lean teams of Information Systems Security Officers to enable program personnel to create contract deliverables. You will be responsible for directly supporting business lines that wish to deploy Anduril products in classified environments.

## Key Responsibilities

- Provide expertise in documenting security controls to reduce the administrative cost of deploying Anduril's products into operational environments.

- Partner with program and security teams to coordinate security artifacts in support of classified deployments.

- Apply technology standards from the commercial space in classified, air-gapped environments.

- Collaborate with Information System Owners to understand key stakeholders' needs and provide complex technical solutions to meet contractual obligations.

- Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.

- Define, document, and conduct security scanning on Anduril's products and accredited information systems.

- Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

## Requirements

- Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.

- Integrate security best practices into Anduril's Software Development Lifecycle (SDLC) and infrastructure design, collaborating with internal IT and engineering teams.

- Conduct security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.

- Recommend and implement security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.

- Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.

- Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.

- Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

## Preferred Qualifications

- Experience with application security paradigms such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

- Proven experience in securing micro-services architecture, including implementing best practices and compliance with DoD cybersecurity standards.

- Experience with cybersecurity in unmanned and ground control system within DoD environments.

- Experience with containerization and kubernetes along with the best practices for securing them.

- Experience with Cloud Service Providers (CSPs) and the various tools they offer for implementing security and compliance best practices.

## Benefits

- US Salary Range: $146,000-$194,000 USD

- Comprehensive medical, dental, and vision plans

- Income Protection: Life and disability insurance

- Generous time off: Highly competitive PTO plans

- Family Planning & Parenting Support: Coverage for fertility treatments, adoption, and gestational carriers

- Mental Health Resources: Access free mental health resources 24/7

- Professional Development: Annual reimbursement for professional development

- Commuter Benefits: Company-funded commuter benefits

- Retirement Savings Plan: Traditional 401(k), Roth, and after-tax options

## Skills

### Required
- NIST RMF
- JSIG
- Information Systems Security
- Security Risk Assessments
- Vulnerability Assessments
- Audits
- IDS/IPS
- Encryption Protocols
- Secure Communications Technologies

### Nice to have
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Micro-services architecture
- DoD cybersecurity standards
- Cybersecurity in unmanned and ground control system
- Containerization
- Kubernetes
- Cloud Service Providers (CSPs)

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/andurilindustries/jobs/5048775007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)