A
2027 New Grad Information Security Engineer
Anduril Industries
Costa Mesa, California, United StatesFresher3h agovia Greenhouse
This job at a glance
- Who can apply
- New grads and up to 1 year · Bachelor's degree
- Must know
- AWSAzureSIEMActive DirectoryCybersecurityTerraform
- Nice to have
- LinuxWindowsNetworkingPython
- Work
- On-site in Costa Mesa
- Pay
- Not stated by the employer.
- Skill demand
- AWS38%SIEM38%Azure37%Active Directory16%of 100 similar entry-level jobs posted in the US this week
- Listed
- Nov 10, 2026 · still open
Sign in free to see which of these skills your resume already shows.
About the Role
Anduril Industries is seeking an entry-level Information System Security Engineer (ISSE) to join the Space Classified IT and Cyber Team. This role offers hands-on experience in hardening, scanning, and automating real systems in both unclassified on-premises environments and cloud platforms like AWS and Azure.
Key Responsibilities
- Harden Windows and Red Hat Enterprise Linux (RHEL) systems according to DISA Security Technical Implementation Guides (STIGs).
- Check hardened systems using SCAP tools and document findings.
- Secure AWS and Azure environments, focusing on identity and access, logging, encryption, and compliance checks using tools such as AWS Security Hub and Microsoft Defender for Cloud.
- Write Ansible playbooks and scripts to apply and verify security settings.
- Build and test hardened images, patches, and configuration changes before production deployment.
- Assist in running ACAS (Tenable) scans and resolve identified issues with system and network engineers.
- Configure and tune security tools like Splunk and Trellix.
- Create authorization documentation, including security plan sections, diagrams, and assessment evidence.
- Adhere to change control processes and document all work performed.
What You'll Learn
- VMware vSphere, Active Directory, and enterprise storage management and security.
- DoD cloud security principles, including impact levels and the Cloud Computing Security Requirements Guide.
- DoD security tooling, such as ACAS, SCAP Compliance Checker, Evaluate-STIG, and Splunk.
- The process by which systems achieve an Authorization to Operate (ATO) under RMF and JSIG.
Requirements & Tech Stack
- Pursuing or recently completed a bachelor’s or master’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
- Must be a U.S. Person due to potential access to U.S. export-controlled information or facilities.
- Ability to start full-time in 2027.
Preferred Qualifications
- Proficiency with Linux and Windows command line.
- Understanding of networking fundamentals, including TCP/IP, subnetting, DNS, and VLANs.
- Experience with scripting in Python, Bash, Yaml, or PowerShell.
- Clear written communication skills.
- Experience with AWS or Azure (e.g., AWS Certified Cloud Practitioner, AZ-900, or personal projects).
- Experience with a home lab environment using hypervisors such as Proxmox, Hyper-V, KVM, VirtualBox, or ESXi.
- Hands-on experience with STIG Viewer, SCAP Compliance Checker, OpenSCAP, or Nessus.
- Experience with Windows Server, Active Directory, or Group Policy.
- Familiarity with Ansible, Terraform, or other infrastructure-as-code tools.
- Knowledge of RMF, NIST SP 800-53, or NIST SP 800-171.
- Basic understanding of storage concepts, including RAID, iSCSI, NFS, and snapshotting versus backups.