Lead Security Engineer, GRC
Anduril IndustriesBase Salary
$166k - $253k/yr
Responsibilities
- Build evidence-collection pipelines and map system data to a normalized control model.
- Create reusable collectors and schemas for automating compliance controls.
- Establish a system of record for controls, mappings, and evidence and lead build-versus-buy analysis.
- Detect control drift and route findings to system owners with remediation and risk-acceptance workflows.
- Translate CMMC, NIST 800-171, NIST 800-53, FedRAMP, and IL5 requirements into automated technical checks.
- Set technical direction and mentor a growing engineering team.
Requirements
- 6+ years of experience in security engineering, GRC, or a related role, including hands-on automation or data-pipeline development.
- Strong programming ability in a general-purpose language such as Go, Python, or Rust.
- Hands-on experience operationalizing CMMC, NIST 800-171, NIST 800-53, FedRAMP, or SOC 2 frameworks.
- Experience designing data collection and integrations across cloud and SaaS systems, including APIs, log or event pipelines, and data lakes.
- Production experience with infrastructure as code such as Terraform or AWS CDK.
- Track record of setting technical direction and mentoring engineers.
- Ability to work autonomously, own ambiguous problems, and align partner teams.
- Eligible to obtain and maintain a U.S. Secret clearance.
- Preferred experience includes continuous control monitoring or GRC platforms such as Vanta, Drata, Hyperproof, or OneTrust.
- Preferred experience includes security data lakes, log aggregation, data marts, STIG or ConMon scanning, CSPM, Kubernetes hardening, or work in high-growth defense technology environments.
Benefits
- Full-time employees receive comprehensive health and recovery benefits available at little to no cost.
- Highly competitive equity grants are included in the majority of full-time offers.
- Base salary range is $166,000—$253,000 USD.
- The company provides candidate data privacy and recruitment-security protections as part of the hiring process.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.