SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Applied Intuition (valued at $15B, Series A) is seeking an Information Security System Officer (ISSO) to own the day-to-day security posture of EpiSci's classified information systems across Irvine and Poway facilities. EpiSci, an Applied Intuition company, develops next-generation tactical autonomy solutions for national security, including autonomy software for uncrewed aerial systems, tactical fighter aircraft, crewed-uncrewed teaming, cognitive sensors, and battle management command and control.
In this hands-on role, you will build and maintain authorization packages under the Risk Management Framework (RMF), drawing implementation guidance from JSIG, DAAPM, ICD-503, CMMC, and NIST 800 series standards. You will work directly with the ISSM to attain and maintain assessment and authorization from government authorizing officials, from initial requirements through operational deployment and continuous monitoring.
Key responsibilities include:
- Maintain accredited classified systems in an authorized operating state while meeting program delivery timelines
- Author, update, and defend RMF artifacts: System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, Risk Assessment Reports, Configuration Management Plans, Incident Response Plans, Continuous Monitoring Plans, and hardware/software baselines
- Execute continuous monitoring via ACAS and Nessus vulnerability scanning, SCAP and STIG compliance checking, audit log review, and remediation tracking against CAT I, II, and III findings
- Support design, development, and implementation of secure facilities procedures and ensure facility compliance for classified information system processing
- Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, threats, and protection needs, and recommend mitigations
- Lead periodic self-inspections and support DoD Cybersecurity On-Site Inspections, DCSA assessments, and customer security reviews across both sites
- Serve as first-line response for classified security incidents and spillage: detect, contain, preserve evidence, document, and escalate through the ISSM and program security chain
- Administer and harden classified computing and network infrastructure, including standing up and configuring new enclaves
- Manage user account provisioning, privileged access review, media control, and trusted download and data transfer procedures
- Deliver security awareness and system-specific training to cleared users and system administrators
- Maintain working knowledge of evolving policy, regulation, and compliance guidance affecting classified computing assets
Travel of approximately 15-20% between Irvine and Poway, CA, as well as to customer and government sites is expected.
MINIMUM QUALIFICATIONS:
- Bachelor's degree in a relevant field, or a minimum of 5 years of ISSO, ISSE, or cybersecurity policy and engineering experience in a classified environment
- DoD 8570/8140 IAM Level I/IAT Level 2 (Security+) as a condition of employment
- Demonstrated proficiency applying RMF and writing authorization packages, with working knowledge of ICD-503, JSIG, and the NIST 800 series (800-53, 800-37, 800-171)
- Hands-on experience with security tooling: NESSUS and ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, and HBSS or ESS
- Experience designing, building, and maintaining information system enclaves, including the underlying computing hardware and network architecture
- Working knowledge of incident response, disaster recovery, forensic principles, continuous monitoring, and cybersecurity hygiene
- Active DoD security clearance (SECRET minimum) and U.S. citizenship
PREFERRED QUALIFICATIONS:
- Prior SAP experience as an ISSO, ISSE, or system administrator under JSIG, with current or recent program briefings
- TS/SCI with the ability to obtain program access
- eMASS, Xacta, or equivalent package management experience as a package author
- Experience with DCSA DAAPM and NISPOM-governed facilities, including Co-Use or multi-program environments
- Prior ISSM designation, or readiness to be designated ISSM for a smaller program
- Hands-on Linux (RHEL, Rocky, Ubuntu) and Windows Server administration in air-gapped and cross-domain environments
- Familiarity with cross-domain solutions, COMSEC and TACLANE operations, or trusted download procedures
- CMMC assessment or preparation experience on the CUI side
- Experience supporting a rapid-prototyping or startup defense environment
