Track and coordinate CVE remediation across all program environments using automated container vulnerability scanning, enforcing SLA timelines with owning engineering teams

Review third-party vendor onboarding security packages: container scan results, SAST reports, CSSP audit logging documents, POA&Ms, SBOMs, STIG checklists, and network/data flow diagrams

Validate STIG compliance using SCAP, Evaluate-STIG, and review against DISA STIGs for containerized applications and Kubernetes infrastructure

Manage and audit user access controls through the platform's role-based permission model, enforcing least privilege and RBAC across all environments

Monitor security events through coordination with the program's Cybersecurity Service Provider (CSSP), which runs 24/7 monitoring; review audit logs, investigate anomalies, and escalate per incident response procedures

Maintain all security artifacts in eMASS including POA&Ms, risk assessments, authorization letters, and continuous monitoring evidence across multiple eMASS records

Review platform Change Requests for security impact

Support RMF activities including security control assessments, SCA evidence collection, and ATO package preparation

Conduct weekly CVE expiry reviews, compile per-team remediation lists, and coordinate bulk outreach to engineering teams

Assist with ISA development and review for system interconnections and Cross-Domain Solution paths

Senior Information Systems Security Officer, NGC2

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Anduril Industries

More roles at Anduril Industries