SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 164,000 - 0 / annual
Anduril Industries is seeking an Information Systems Security Manager to lead security initiatives for classified defense deployments. This role manages lean teams of Information Systems Security Officers and serves as the driving force behind Anduril's classified system deployments, bridging business line needs with critical security requirements.
Key responsibilities include:
• Lead and mentor Information Systems Security Officers, fostering a culture of cybersecurity excellence
• Partner with program and security teams to coordinate security artifacts supporting classified deployments in air-gapped environments
• Document and implement security controls per NIST RMF, JSIG, and DoD standards to reduce deployment costs
• Tailor NIST 800-53 controls to network environments and oversee continuous monitoring programs
• Conduct security risk assessments, vulnerability assessments, and audits to identify and mitigate threats
• Manage Authorization and Accreditation (A&A) processes to obtain and maintain system Authority to Operate (ATO)
• Lead incident response efforts including investigation, root cause analysis, and reporting
• Develop and maintain System Security Plans (SSPs), POA&Ms, and accreditation documentation
• Collaborate with government security officials and stakeholders to address security gaps
• Integrate security best practices into software development lifecycle and infrastructure design
• Conduct regular audits and continuous monitoring to ensure compliance and system resilience
• Deliver security awareness training and enforce adherence to security best practices
Required qualifications include active U.S. Top Secret security clearance, expertise in NIST RMF and Risk Management Framework, experience designing secure systems and networks, and proficiency in security risk assessments and vulnerability management. Preferred experience includes application security testing (SAST/DAST/SCA), microservices security, DoD cybersecurity standards, containerization/Kubernetes, and cloud security platforms.
