Information Systems Security Officer (ISSO)

Job description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.  ABOUT THE ROLE Apex is looking for an Information Systems Security Officer (ISSO) to keep assigned systems secure, documented, and ready for customer or third-party review. You will work with system owners, IT, engineering, the SOC, and the Cybersecurity Lead to make sure security requirements are implemented in the environment and supported by evidence that holds up under review. The primary focus is NIST SP 800-171 and CMMC Level 2. This role will also support ATO activities, SOC 2 Type II, ISO-aligned compliance work, and other customer security requirements as Apex grows. Responsibilities - Serve as the security point of contact for operations and keep teams informed on the current cyber posture. - Work with the Cybersecurity team to assess requirements, risk findings, and due dates for contracts. - Maintain the SSP, system inventory, policies, procedures, and supporting evidence for our CUI environment. - Track NIST SP 800-171 and CMMC Level 2 implementation at the specific artifact level. - Support ATO and RMF activities including creating and updating security documentation and writing POA&Ms with target completion dates. - Validate evidence from our cybersecurity suite including CrowdStrike, Palo Alto, Tenable, and Jira. - Lead vulnerability and configuration remediation with system owners; make sure ownership, expectations, and target dates are clear. - Lead security reviews on privileged accounts, terminated users, vulnerability results, and other security requests from the program. Requirements - Active TS/SCI clearance required - US Citizenship required - 3 or more years of experience as an ISSO, security compliance analyst, security engineer, system administrator with security responsibilities, or a similar role - Strong working knowledge of NIST SP 800-171, CMMC Level 2, POA&M management, control evidence, and assessment preparation - Experience maintaining an SSP or equivalent system security documentation and supporting formal security reviews - Ability to understand and validate evidence from identity, cloud, endpoint, network, vulnerability, and logging platforms - Strong follow-through across multiple teams and the ability to write security documentation that clearly reflects what is actually implemented Preferred Qualifications - Experience with ATO, RMF, NIST SP 800-53, SOC 2 Type II, ISO 27001, DFARS 252.204-7012, SPRS, STIGs, or classified system security - Experience with Microsoft GCC High, CrowdStrike, Palo Alto, Tenable, AWS GovCloud, Entra ID, or similar enterprise security platforms - Security+, CGRC, CISSP, or a comparable security certification -Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments WHY JOIN APEX? Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one. WHAT WE OFFER FOR FULL-TIME EMPLOYEES: - Shared upside: Receive equity in Apex, letting you benefit from the work you create - Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost - Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays - Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2% - 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel - Daily catered lunch and unlimited snacks to keep you fueled throughout the day - Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family - Your dream desk setup and all the tools you need to be your most productive self - World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life - Real impact opportunity: Work alongside exp