Assistant Contractor Special Security Officer

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years. ABOUT THE TEAM The Special Access Program Security team is responsible for ensuring the security of classified information for Anduril’s most sensitive programs and contracts. The team has individuals located across the country and works in a collaborative manner to ensure the security of Anduril and government information, and Anduril’s defense products. ABOUT THE JOB We are looking for an Assistant Contractor Special Security Officer — Program Integration (ACSSO-Program Integrator) to join our growing team in Chantilly, VA. This is a customer-appointed security program management position embedded within the security organization — the incumbent must be nominated by the contractor and formally approved by the Westfield government program security office to ensure compliance with the customer’s classified program security standards before assuming any duties in this role. The position requires a cleared professional who combines hands-on technical fluency with a knowledge of SCI security policy. The ACSSO-Program Integrator serves as the designated alternate to the primary CSSO and functions as the single security focal point for all technical interactions across every program team, IT deployment team, and government program security office. This appointment remains contingent on the incumbent’s continued adherence to all classified program security standards established by the Westfield customer. In this role you will bridge two worlds: you will speak the language of IT deployment and systems engineering teams with enough depth to evaluate technical changes, network architectures, and system configurations on their security merits, and you will carry the same fluency into conversations with government Cognizant Security Authorities (CSAs), Cognizant Security Offices (CSOs), and Authorizing Officials so that security requirements are communicated accurately in both directions. You will own the execution cadence — driving implementation, coordinating across engineering, IT, and facilities teams, tracking compliance milestones, and ensuring nothing falls through the cracks between security policy and program operations. This role leverages the incumbent’s technical systems administration background to bring credibility when working with IT and engineering teams, enabling faster, more accurate translation of security requirements into system-level actions. You will be responsible for managing security implementation schedules, coordinating system accreditation and authorization activities, and maintaining program security documentation in support of SCI initiatives governed by ICD 703, ICD 705, ICD 503, NIST SP 800-53, and applicable NISPOM (32 CFR Part 117) requirements. If you thrive in fast-paced, collaborative environments and are ready to own security outcomes across every technical and programmatic touchpoint, this role is for you! WHAT YOU’LL DO - Serve as the designated security point of contact for all program teams, IT deployment teams, and system administration groups — ensuring every technical change, system deployment, and infrastructure modification receives proper security review before implementation. - Translate complex security requirements (ICD 503, NIST SP 800-53, NISPOM) into clear, actionable technical guidance that IT deployment teams can execute against, and verify that implementations meet the intent of the requirement. - Act as the day-to-day security liaison embedded with engineering and IT operations, maintaining enough technical depth in systems administration, network architecture, and deployment workflows to evaluate proposed changes on their security merits. - Provide regular security status roll-ups to program management and the CSSO that translate technical findings, system vulnerabilities, and deployment risks into program-level risk language accessible to non-technical stakeholders. - Coordinate directly with government security representatives, Authorizing Officials, CSAs, and partner program security teams on all cross-functional security matters, serving as the primary technical voice from the contractor security organization. - Communicate system architecture decisions, technical risk posture, and remediation plans to government program security offices with sufficient technical precision to support informed authorization decisions. - Serve as the Alternate CSSO, assuming full CSSO authority and responsibilities in the primary CSSO’s absence, including independent security decision-making, incident reporting, and government liaison duties. - Administer SCI security programs in accordance with ICD 703, ICD 705, ICD 503, NIST SP 800-53, and applicable NISPOM requirements, ensuring continuous compliance across all program activities. - Assist with incident response coordination, including classification reviews, damage assessments, government notifications, evidence preservation, and remediation tracking. - Direct the program security implementation schedule, assigning action items, managing POA&Ms, and driving corrective actions to closure across all responsible parties. - Maintain current security documentation including System Security Plans (SSPs), hardware/software inventories, network diagrams, SCIF documentation, and configuration baselines. - Conduct self-inspections and internal security reviews in concert with IT stakeholders of IT infrastructure to identify vulnerabilities, process gaps, and compliance deficiencies; develop and implement corrective action plans. - Develop and maintain SOPs, security checklists, and templates to standardize security operations, improve the security-to-operations handoff, and track improvement metrics across programs. REQUIRED QUALIFICATIONS - Active TS/SCI security clearance (CI Polygraph preferred). - 3–5 years of experience as an ACSSO or similar role in security operations, system administration, or IT operations within classified environments. - Demonstrated understanding of ICD 503 and NIST SP 800-53. - Detailed familiarity with system accreditation processes, POA&M management, and security documentation (SSPs, SCTG, etc.). - Experience coordinating with government security counterparts and Authorizing Officials. PREFERRED QUALIFICATIONS - Experience with NRO, DoD, or IC security programs and associated systems (DISS, Talon, Scattered Castles, SIMS). - Familiarity with ICD 705 SCIF standards, ICDs 703/704/505, and Security Classification Guides. - Willingness to travel on company business (less than 25%). US Salary Range $117,000—$154,000 USD The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: Benefits At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits. Protecting Yourself from Recruitment Scams Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information. To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind: No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates. - Please always verify communications: - Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address. - Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com. Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links. What to Do If You Suspect Fraud: Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to contact@anduril.com. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts. Data Privacy To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.