chaosindustries · Los Angeles, California, United States · Los Angeles, California, United States
<p>CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats. </p> <p>CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit <a href="https://www.chaosinc.com">www.chaosinc.com</a>.</p> <p> </p> <p data-renderer-start-pos="927" data-local-id="7311aad0db1d"><strong data-renderer-mark="true">Role Overview:</strong></p> <p data-renderer-start-pos="945" data-local-id="38b46e9e7b7f">CHAOS Industries seeks an experienced Information System Security Engineer (ISSE) to serve as the primary security engineer for classified Information systems across one or more Program Security Authorization boundaries. The ISSE will take full ownership of the security engineering effort for our next generation classified processing environment – from initial system security architecture through Assessment and Authorization (<span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">A&A</span></span></span>) and into sustained continuous monitoring once the system reaches Authority to Operate (ATO).</p> <p data-renderer-start-pos="1477" data-local-id="d52fdddb3673"><strong data-renderer-mark="true">Responsibilities: </strong></p> <p data-renderer-start-pos="1500" data-local-id="fd93e6cf0cae"><em data-renderer-mark="true"><strong data-renderer-mark="true">Security Engineering & Architecture:</strong></em></p> <ul class="ak-ul" data-local-id="84662dfc18ba" data-indent-level="1"> <li> <p data-renderer-start-pos="1540" data-local-id="1706c7f831fa">Design and document system security architecture for classified and unclassified Information Systems, ensuring alignment with <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">RMF</span></span></span> (<span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">NIST</span></span></span> 800-37), <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">ICD</span></span></span> 503, and applicable <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">DoD</span></span></span>/<span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">IC</span></span></span> overlays.</p> </li> <li> <p data-renderer-start-pos="1729" data-local-id="79d0ab86e55a">Conduct and review security assessments, maintain system patches, risk analysis, and vulnerability scans (Nessus, <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">ACAS</span></span></span>, <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">SCAP</span></span></span>) to identify and remediate risks.</p> </li> <li> <p data-renderer-start-pos="1891" data-local-id="ab0e06fb4ab6">Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.</p> </li> <li> <p data-renderer-start-pos="2065" data-local-id="155c850c4855">Oversee implementation and validation of <span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">STIG</span></span></span>/<span data-highlighted="true" data-vc="highlighted-text"><span class="_1mT5xdRAKS"><span class="_0nmozVaHVx _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH" data-testid="definition-highlighter">SRG</span></span></span> hardening requirements across Windows, Linux, and network infrastructure.</p> </li> </ul> <p data-renderer-start-pos="2193" data-local-id="12f70d1a2cfb"><strong data-renderer-mark="true">Vulnerability Management and Continuous Monitoring:</strong></p> <ul class="ak-ul" data-local-id="f8e611fc0be7" data-indent-level="1"> <li> <p data-renderer-start-pos="2248" data-local-id="4f4d9244bd01">Run and interpret vulnerability scans (<span data-highlighted="true"