Skip to content

Open nowPosted yesterday

Information Security System Officer (ISSO) — Applied Intuition

a16z portfolio8,293 open roles

Pay
$125,000 – $180,000 a year
Where
Poway, California, United States; Poway, CA
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security System Officer (ISSO) — Applied Intuitiona16z portfolio · Poway, California, United States; Poway, CA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on a16z portfolio's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted yesterday

The posting

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co.

We are an in-office company, and our expectation is that full-time employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. This in-office expectation does not apply to contractor positions

About EpiSci

EpiSci, an Applied Intuition company, develops next-generation tactical autonomy solutions for national security problems. EpiSci's autonomy software is technology agnostic, operationally informed, and tactically relevant, and has piloted swarms of uncrewed aerial systems and tactical fighter aircraft. Additional applications include crewed-uncrewed teaming for air dominance, cognitive sensors, networks for advanced communications systems, and battle management command and control for informed decision-making. EpiSci delivers speed, cost-efficiency, and scalability as the preferred partner for defense agencies and industry teams seeking mission-critical autonomy solutions.

About the Role

This ISSO owns the day-to-day security posture of EpiSci's classified information systems, collateral and Special Access Program, across our Irvine and Poway facilities.

You will build and maintain authorization packages under the Risk Management Framework, with implementation guidance drawn from JSIG, DAAPM, ICD-503, CMMC, and the NIST 800 series. You will work directly with the ISSM to attain and maintain assessment and authorization from government authorizing officials, from initial requirements through operational deployment and continuous monitoring.

This is a hands-on seat. The work includes configuring, scanning, remediating, and standing up enclaves alongside the documentation. You can expect regular interaction with government security offices and authorizing officials, DCSA, and program security teams, and a continuous review cadence on eMASS and program packages.

Program access: This position requires Special Access Program access. Prior SAP experience is strongly preferred. Candidates with collateral-only experience and a strong track record under RMF will be considered and read on after hire.

What You Will Do

  • Maintain accredited classified systems in an authorized operating state while meeting program delivery timelines
  • Author, update, and defend RMF artifacts: System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, Risk Assessment Reports, Configuration Management Plans, Incident Response Plans, Continuous Monitoring Plans, and hardware and software baselines
  • Execute continuous monitoring: ACAS and Nessus vulnerability scanning, SCAP and STIG compliance checking, audit log review, and remediation tracking against CAT I, II, and III findings
  • Support the design, development, and implementation of procedures and systems for secure facilities, and ensure facility compliance with requirements for classified information system processing
  • Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, threats, and protection needs, and recommend mitigations
  • Lead periodic self-inspections and support DoD Cybersecurity On-Site Inspections, DCSA assessments, and customer security reviews across both sites
  • Serve as first-line response for classified security incidents and spillage: detect, contain, preserve evidence, document, and escalate through the ISSM and program security chain
  • Administer and harden classified computing and network infrastructure, including standing up and configuring new enclaves
  • Manage user account provisioning, privileged access review, media control, and trusted download and data transfer procedures
  • Deliver security awareness and system-specific training to cleared users and system administrators
  • Maintain working knowledge of evolving policy, regulation, and compliance guidance affecting classified computing assets

Minimum Qualifications

  • Bachelor's degree in a relevant field, or a minimum of 5 years of ISSO, ISSE, or cybersecurity policy and engineering experience in a classified environment
  • DoD 8570/8140 IAM Level I/IAT Level 2 (Security +) as a condition of employment
  • Demonstrated proficiency applying RMF and writing authorization packages, with working knowledge of ICD-503, JSIG, and the NIST 800 series (800-53, 800-37, 800-171)
  • Hands-on experience with security tooling: NESSUS and ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, and HBSS or ESS
  • Experience designing, building, and maintaining information system enclaves, including the underlying computing hardware and network architecture
  • Working knowledge of incident response, disaster recovery, forensic principles, continuous monitoring, and cybersecurity hygiene
  • Active DoD security clearance (SECRET minimum) and U.S. citizenship

Preferred Qualifications

  • Prior SAP experience as an ISSO, ISSE, or system administrator under JSIG, with current or recent program briefings
  • TS/SCI with the ability to obtain program access
  • eMASS, Xacta, or equivalent package management experience as a package author
  • Experience with DCSA DAAPM and NISPOM-governed facilities, including Co-Use or multi-program environments
  • Prior ISSM designation, or readiness to be designated ISSM for a smaller program
  • Hands-on Linux (RHEL, Rocky, Ubuntu) and Windows Server administration in air-gapped and cross-domain environments
  • Familiarity with cross-domain solutions, COMSEC and TACLANE operations, or trusted download procedures
  • CMMC assessment or preparation experience on the CUI side
  • Experience supporting a rapid-prototyping or startup defense environment

What Success Looks Like in the First Year

  • 90 days: Fully briefed and read on. Baseline established, with a complete inventory of accredited systems across Irvine and Poway, current POA&M status understood, and scan and audit cadence running on schedule.
  • 6 months: Self-inspection program running cleanly at both sites, package gaps closed, and established as the point of contact for the ISSM, program security, and government assessors.
  • 12 months: New program systems accredited on the timeline the program requires.

Travel Requirements

Willing to travel for company business between Irvine, CA and Poway, CA, as well as to customer and government sites (approximately 15-20%).

Security Requirements

  • Must be a U.S. Citizen
  • Must hold an active DoD security clearance
  • Must be eligible for and willing to accept Special Access Program briefings
  • Position is 100% on-site. Classified work cannot be performed remotely.

For more information about U.S. security clearances: https://www.state.gov/securityclearances

Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, Appendix A to Subpart A), relating to the notice of employee rights under federal labor laws.

FOR US-BASED ROLES: Applied Intuition is committed to providing an accessible and inclusive application and interview experience to applicants who are disabled veterans and other applicants with disabilities or medical conditions. Reasonable accommodations are available, requesting an accommodation will not affect your candidacy in any way, and you are not required to disclose the nature of your disability or medical condition in order to make a request. If you require an accommodation please contact [email protected]. We will work with you!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against a16z portfolio's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on a16z portfolio's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    a16z portfolio's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.