WHAT YOU’LL DO

• Serve as the driving force behind Anduril network environments.
• Manage a team of system administrator(s) and compliance analyst(s) professionals to provide end users with a secure and smooth network environment.
• Oversee the RMF lifecycle management of the programs under their purview
• Take technology standards from the commercial space and apply them in classified, air-gapped environments.
• Work with Information System Owners to understand key stakeholders’ needs and requirements to provide complex technical solutions to drive contractual obligations.
• Tailor NIST 800-53 controls and determine which controls are applicable to the network environment, as well as oversee the implementation of Continuous Monitoring for their respective programs.
• Provide expertise on RMF documentation in order to reduce the administrative cost of maintaining an operational environment.
• Define, document and follow standards and best practices that would impact the organization as a whole and enhance the operational environment of Anduril across multiple programs.
• Develops and maintains Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities, address customer concerns, and monitor the life cycle of their respective network environments.

REQUIRED QUALIFICATIONS

• Familiar and comfortable with monitoring of RMF authorization, implementation, and end of life cycles processes.
• Intricately familiar with NISPOM (32 CFR Part 117) DAAPM, JSIG, applicable NIST publications, and RMF.
• Demonstrate knowledge of exploits, attacks, and tools used by skilled hackers.
• 2-4 years of experience in RMF Cybersecurity (ISSM, ISSO, System Administrator) or related discipline (vulnerability management, SOC, threat hunting, Cyber intel, GRC or other governance role).
• CISM / CISSP or equivalent IAM level III certification (For DoD 8140 compliance)
• DoD Top Secret clearance with SCI eligibility.

PREFERRED QUALIFICATIONS

• Prefer experience or knowledge of modern software development techniques and processes and their security (CI pipelines, microservices architectures, cloud and container based deployments).
• Scripting knowledge (Python, Bash, Powershell, etc.)