Senior Software Engineer, Application Security
Anduril IndustriesBase Salary
$191k - $253k/yr
Responsibilities
- Design and build distributed services for vulnerability scanning, policy enforcement, and remediation workflows.
- Develop and extend an AWS-based event-driven scanning orchestration platform using SQS, Lambda, S3, and ECR.
- Build policy-as-code systems that enforce security policy in CI/CD pipelines and deployment configurations.
- Design APIs and CLIs that integrate security tooling into developer workflows.
- Develop data pipelines that aggregate, normalize, and route findings from multiple scanning engines into vulnerability management systems.
- Collaborate with engineering teams to understand security needs and build appropriate tooling.
- Evaluate third-party security tools and create custom integrations or replacements.
- Participate in an on-call rotation for security tooling infrastructure.
Requirements
- At least 5 years of experience designing and developing production software systems.
- Strong proficiency in Go, the team’s primary backend-services language.
- Experience building distributed systems or data pipelines involving event-driven architectures, message queues, APIs, or worker systems.
- Proficiency with Python for scripting, automation, and tooling.
- Experience with cloud infrastructure, preferably AWS and services such as Lambda, SQS, S3, or ECR.
- Ability to interpret vulnerability reports, SBOMs, and static-analysis results and build systems around them.
- Strong communication skills and ability to work across teams.
- Eligibility to obtain and maintain an active U.S. Secret security clearance.
- Experience with CircleCI or GitHub Actions and developer-workflow integrations is preferred.
- Familiarity with Syft, Trivy, Grype, and Semgrep is preferred.
- Experience with Terraform, policy-as-code frameworks such as OPA/Rego and Conftest, Kubernetes, and Nix build systems is preferred.
- Background in application security or product security engineering is preferred.
Benefits
- Comprehensive benefits package available at little to no cost for full-time employees.
- Full-time employment with competitive health, recovery, and related benefits.
Tech Stack
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.