Senior Vulnerability Engineer
Anduril IndustriesBase Salary
$191k - $253k/yr
Responsibilities
- Discover novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
- Design and execute vulnerability research plans using code review, reverse engineering, fuzzing, emulation, dynamic instrumentation, hardware analysis, and adversarial testing.
- Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, proof-of-concept tooling, and experiment-orchestration systems.
- Analyze vulnerability root cause, exploitability, operational impact, and mitigation options.
- Conduct hardware-in-the-loop experiments involving software exploitation, protocol analysis, physical interfaces, and lab instrumentation.
- Partner with reverse engineers, product security engineers, embedded software engineers, hardware engineers, and systems teams to validate findings and drive remediation.
- Write technical reports containing evidence, reproduction steps, exploitability assessments, impacts, mitigations, and follow-on research opportunities.
Requirements
- Strong experience discovering vulnerabilities in firmware, applications, network services, embedded Linux systems, drivers, protocols, IoT devices, or hardware-adjacent systems.
- Proficiency with one or more vulnerability-research and tooling languages, including Python, C, C++, Rust, or Go.
- Experience with fuzzing, harness development, crash triage, exploitability analysis, source-code review, binary analysis, or dynamic instrumentation.
- Ability to analyze memory corruption, logic flaws, authentication and authorization failures, unsafe parsing, concurrency issues, insecure update flows, and trust-boundary failures.
- Hands-on familiarity with Linux, embedded systems, networking, debugging, and common security research tooling.
- Experience evaluating secure boot, firmware update paths, key storage, memory protection, and debug-interface controls.
- Ability to communicate vulnerability impact, reproduction steps, and mitigation options to research and engineering audiences.
- Eligibility to obtain and maintain a U.S. security clearance.
- Preferred experience with boot chains, device identity systems, cryptographic integrations, anti-tamper mechanisms, programmable-logic-backed systems, coverage-guided fuzzing, symbolic execution, differential testing, fault injection, protocol state modeling, or hardware-in-the-loop testing.
- Preferred familiarity with Ghidra, IDA Pro, Binary Ninja, QEMU, Frida, gdb/lldb, or comparable frameworks.
- Preferred background in embedded, aerospace, robotic, RF, or cyber-physical systems, and experience with RF protocols, cryptographic protocol analysis, FPGA/SoC security, signal processing, or board-level vulnerability assessment.
- Preferred track record of producing vulnerability research artifacts, internal tooling, conference-quality writeups, CVEs, or comparable technical outputs, along with technical leadership, mentorship, or ownership of complex research efforts.
Benefits
- Base salary range is $191,000–$253,000 USD.
- Highly competitive equity grants are included in the majority of full-time offers.
- Top-tier benefits for full-time employees are available at little to no cost to employees.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.