Senior Vulnerability Engineer
Anduril IndustriesBase Salary
$191k - $254k/yr
Responsibilities
- Discover novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
- Design and execute vulnerability research plans using code review, reverse engineering, fuzzing, emulation, dynamic instrumentation, hardware analysis, and adversarial testing.
- Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, and proof-of-concept tooling.
- Analyze vulnerability root cause, exploitability, operational impact, and mitigation options.
- Partner with reverse engineers, product security engineers, embedded software engineers, hardware engineers, and systems teams to validate findings and drive remediation.
- Write technical reports covering evidence, reproduction steps, exploitability, impact, mitigations, and follow-on research opportunities.
- Design hardware-in-the-loop vulnerability experiments using software exploitation, protocol analysis, physical interfaces, and lab instrumentation.
- Develop tooling to automate experiment orchestration, device interaction, data collection, crash triage, and vulnerability reproduction.
Requirements
- Strong experience discovering vulnerabilities in firmware, applications, network services, embedded Linux systems, drivers, protocols, IoT devices, or hardware-adjacent systems.
- Proficiency in one or more vulnerability research and tooling languages, including Python, C, C++, Rust, or Go.
- Experience with fuzzing, harness development, crash triage, exploitability analysis, source-code review, binary analysis, or dynamic instrumentation.
- Ability to analyze memory corruption, logic flaws, authentication and authorization failures, unsafe parsing, concurrency issues, insecure update flows, and trust-boundary failures.
- Hands-on familiarity with Linux, embedded systems, networking, debugging, and common security research tooling.
- Ability to communicate vulnerability impact, reproduction steps, and mitigation options to research and engineering audiences.
- Experience evaluating embedded protection mechanisms such as secure boot, firmware update paths, key storage, memory protection, and debug interface controls.
- Comfort with lab-based vulnerability validation using hardware interfaces, protocol analyzers, debuggers, or instrumented test setups.
- Must be eligible to obtain and maintain a U.S. security clearance.
- Preferred experience includes vulnerability research involving boot chains, firmware updates, device identity systems, cryptographic integrations, anti-tamper mechanisms, or programmable-logic-backed systems.
- Preferred experience includes coverage-guided fuzzing, symbolic execution, differential testing, fault injection, protocol state modeling, or hardware-in-the-loop testing.
- Preferred familiarity with Ghidra, IDA Pro, Binary Ninja, QEMU, Frida, gdb/lldb, or comparable frameworks.
- Preferred background in embedded, aerospace, robotic, RF, or cyber-physical systems.
- Preferred track record of producing vulnerability research artifacts, internal tooling, conference-quality writeups, CVEs, or comparable technical outputs.
- Preferred experience with side-channel analysis, black-box testing, hardware-assisted fuzzing, RF protocols, cryptographic protocol analysis, FPGA/SoC security, signal processing, or board-level vulnerability assessment.
- Demonstrated technical leadership, mentorship, or ownership of complex vulnerability research efforts is preferred.
Benefits
- Full-time employees receive comprehensive competitive benefits available at little to no cost.
- The role is a full-time position with base salary only included in the stated salary range; equity grants are included in the majority of full-time offers as part of total compensation.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.