Information Systems Security Manager

At Anduril Industries, we are transforming military capabilities with advanced technology. Our mission is to integrate cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology into military systems quickly, not years later.

About The Team

Anduril employs diverse networks and infrastructures to support global operations. Information Systems Security Managers are responsible for enabling classified deployments by leading teams and coordinating security artifacts. They must be well-versed in IT and the Risk Management Framework, capable of managing business line needs and driving customer requirements.

About The Job

• Provide expertise in documenting security controls to reduce administrative costs.
• Partner with program and security teams to coordinate security artifacts for classified deployments.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Collaborate with Information System Owners to understand stakeholder needs and provide complex technical solutions.
• Define, document, and conduct security scanning on Anduril’s products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

Required Qualifications

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Integrate security best practices into Anduril’s Software Development Lifecycle (SDLC) and infrastructure design, collaborating with internal IT and engineering teams.
• Conduct security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Recommend and implement security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Oversee Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Lead incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Develop and deliver security awareness training and ensure adherence to security best practices.
• Provide leadership and mentorship to security team members, fostering a culture of cybersecurity excellence.

Preferred Qualifications

• Experience with application security paradigms such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Experience with securing micro-services architecture, including implementing best practices and compliance with DoD cybersecurity standards.
• Experience with cybersecurity in unmanned and ground control systems within DoD environments.
• Experience with containerization and Kubernetes along with the best practices for securing them.
• Experience with Cloud Service Providers (CSPs) and the various tools they offer for implementing security and compliance best practices.

Pay

The salary range for this role is $146,000—$194,000 USD. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full-time offers; and are considered part of Anduril's total compensation package.

Benefits

Anduril offers top-tier benefits for full-time employees, including:

• Comprehensive, competitive benefits package (available at little to no cost to employees)
• Health, recovery, and future-focused support

Protecting Yourself from Recruitment Scams

To ensure your safety and confidence during your job search, please keep the following points in mind:

• No financial requests: Anduril will never ask for payment or demand personal financial details.
• Verify communications: Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address. Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com.
• Exercise caution with unsolicited outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.

Data Privacy

To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process.