A

Anduril

Builds autonomous weapons for the US and allies

Information Systems Security Manager - Space

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeCosta Mesa, CA, USAIn-person

About the Job

Requirements

  • At least 5 years of experience in information assurance or cybersecurity, including direct Risk Management Framework (RMF) and Assessment and Authorization (A&A) experience.
  • DoD 8570/8140 compliance at IAM Level II or higher, such as CAP, CASP+, CISM, or CISSP.
  • Demonstrated experience managing system authorization packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms), across multiple classification levels.
  • Experience interfacing with government Authorizing Officials and security control assessors.
  • Strong understanding of NIST 800-53 security controls and CNSSI 1253.
  • Currently possess and be able to maintain an active U.S. Top Secret security clearance.

Responsibilities

  • Lead all Risk Management Framework (RMF) processes for system authorizations (ATO, IATT, IATO), and develop and maintain System Security Plans, Security Assessment Reports, and POA&Ms, tracking remediation within required timeframes.
  • Manage the continuous monitoring program, including vulnerability scans, account audits, access reviews, and risk assessments across all protection levels.
  • Coordinate security control assessments with validators, Security Control Assessors (SCAs), and Authorizing Officials, and interface with government security organizations (DISA, NSA, DIA, and service CIOs) as the primary technical security representative.
  • Lead incident response for security events requiring investigation, containment, and reporting.
  • Provide direct leadership and mentorship to Information Systems Security Officers (ISSOs), establish performance expectations, and ensure comprehensive security coverage across all systems.
  • Manage Governance, Risk, and Compliance (GRC) platforms, track compliance evidence, and brief leadership and customers on authorization status, security posture, and risk decisions.

Desired Qualifications

  • CISSP or CISM certification.
  • Experience with space systems or satellite program security environments.
  • Familiarity with GRC platforms such as eMASS, Xacta, or similar.
  • Prior experience leading or mentoring a cybersecurity team.
  • Background working with DISA Security Technical Implementation Guides (STIGs) and SCAP-based vulnerability management tools.
  • Experience briefing senior leadership and government customers on risk decisions.

About the Company

Anduril

Builds autonomous weapons for the US and allies

Anduril builds autonomous weapons, such as drones, cruise missiles, and robot submarines, for the US military and its allies, often developing them with its own money before any order arrives. In 2024 it beat Boeing, Lockheed Martin, and Northrop Grumman for an Air Force contract to develop Fury, a pilotless jet that flies alongside crewed fighters. Its Lattice software merges camera and radar feeds into one live map and lets a few operators direct many drones and weapons at once, including other companies' systems. Governments buy its systems under contract, and Anduril builds much of the hardware in its own factories. Oculus founder Palmer Luckey co-founded Anduril in 2017, and it is based in Costa Mesa, California.

Company size
10,001+
Company stage
Private
Total funding
$11.5B
Headquarters
Costa Mesa, CA
Founded
2017

Recently Posted Jobs

Explore more opportunities at Anduril

See more jobs