CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats. CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners.

, San Francisco, San Diego, Seattle, and London. com . Role Overview: CHAOS Industries seeks an experienced Information Systems Security Manager (ISSM) to serve as the primary security authority for classified information systems across one or more Program Security Authorization Boundaries (PSABs).

Requirements

This role interfaces directly with government Authorizing Officials ( AOs), Program Managers, and cross-functional engineering teams to sustain Authorization to Operate (ATO) for complex, multi-domain environments.

across Windows, Linux, and network infrastructure. Personnel Program Support Supervise and mentor ISSOs supporting assigned programs; provide guidance and review of ISSO-generated artifacts. Conduct security briefings, annual refresher training, and onboarding education for cleared program personnel.

Support program proposal activities including security cost estimates, security architecture inputs, and DD254 reviews. Audit Continuous Monitoring Implement and oversee continuous monitoring strategies including log management, audit trail reviews, and SIEM integration. Conduct periodic self-inspections, security reviews, and audit activities; track findings to closure.

Coordinate with Facilities Security Officers (FSOs) and Physical Security personnel to ensure integrated program protection.

: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical discipline. Equivalent experience considered in lieu of degree. S.

Government programs. Demonstrated experience managing RMF-based ATOs for classified systems (Secret, Top Secret, TS/SCI) under ICD 503, JSIG, or DAAPM. Experience with ACAS/Nessus, SCAP tools, and security technical implementation guidance (STIGs).

Responsibilities

: Authorization Compliance Develop, maintain, and submit system Security Authorization Packages in accordance with NIST SP 800-37 RMF, ICD 503, JSIG, and DAAPM frameworks. Manage the full lifecycle of ATOs including continuous monitoring, annual reviews, and Plan of Action Milestones (POA Ms). Serve as the primary liaison to government AO/ISSM/ISSO community for all classified system authorization activities.

Ensure compliance with DCSA, DSS, and applicable IC community security policies across all assigned programs. System Security Engineering Risk Management Conduct and review security assessments, risk analyses, and vulnerability scans (Nessus, ACAS, SCAP) to identify and remediate risks. Develop and maintain System Security Plans (SSPs), Security Concept of Operations (CONOPS), hardware/software baseline documentation, and interconnection agreements.

Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.