Application Security Engineer, True Anomaly

• Bachelor’s degree in Computer Science, Information Security, or equivalent professional experience
• Minimum of 3 years of experience in information security, with a focus on continuous monitoring and compliance
• Proficiency with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection
• In-depth knowledge and hands-on experience with FedRAMP, SOC 2, ISO 27001, and NIST frameworks
• Strong understanding of cloud security principles and best practices
• Excellent analytical, problem-solving, and communication skills
• Ability to work independently and collaboratively in a fast-paced environment
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are highly desirable

Desirable

• Software is the central nervous system for True Anomaly’s engineering and product thesis
• Software bridges the gap between military objectives, theoretical astrodynamics and the human and autonomous control of spacecraft and ground systems in time and space
• True Anomaly is seeking a highly experienced Continuous Monitoring Engineer with cloud certification compliance experience, to contribute to the continuing evolution of our complex spacecraft modeling and simulation software
• You do not need to have experience building space ground systems or experience in aerospace
• You’ll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company),
• Develop, implement, and maintain continuous monitoring strategies for FedRAMP-compliant systems
• Conduct continuous control testing and verification in accordance with FedRAMP requirements
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate potential threats
• Monitor security controls to ensure compliance with FedRAMP, SOC 2, ISO 27001, and NIST standards
• Collaborate with cross-functional teams to ensure security measures are integrated into the system development lifecycle
• Support the maintenance the FedRAMP System Security Plan (SSP) and ensure all necessary documentation is up to date
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and respond to security incidents
• Prepare and present reports on the security status and compliance posture to management and external auditors
• Assist in the development and maintenance of security policies, procedures, and guidelines
• Stay updated with the latest security trends, threats, and technology solutions
• Provide guidance and training to internal stakeholders on compliance and security best practices