Senior Product Security Engineer
Anduril IndustriesResponsibilities
- Own the development and maturation of security features for Anduril products.
- Author and maintain System Security Plans, Threat Analysis and Risk Assessments, and compliance evidence.
- Collaborate with engineering teams to build solutions that meet or exceed industry-standard security goals.
- Work with manufacturing and operations teams to develop secure handling and operational processes.
- Engage teams to remediate weaknesses in designs, implementations, integrations, and processes.
- Integrate and mature the Product Security tooling suite across Anduril products.
- Conduct security assessments including architecture reviews, source code analysis, configuration auditing, and adversarial testing.
Requirements
- Proficiency in one or more programming languages, including C/C++, Golang, Rust, or Python.
- Experience assessing the security of firmware, applications, networks, IoT, or embedded systems.
- Experience developing and improving security features for firmware, applications, networks, or embedded systems.
- Experience building, testing, and delivering production-ready systems, especially embedded or Linux systems.
- Experience with structured threat-modeling and risk-assessment methodologies.
- Experience building and securing autonomous systems and understanding their unique threat models.
- Previous military or defense-domain experience is desirable but not mandatory.
- Familiarity with anti-tamper and hardware and software reverse-engineering mechanisms.
- Strong written and verbal communication skills.
- Must be eligible to obtain and maintain UK Security Clearance to at least SC level.
- Must be a UK citizen.
- Preferred qualifications include experience with the UK Ministry of Defence Cyber Security Model, UK Government Security Classifications, DefStans 05-138, Cyber Secure by Design guidance, JSP 440, JSP 453, JSP 604, DIPNs, and ISNs.
- Preferred qualifications include familiarity with DO-326A/ED-202A, SORA or CAA Type Certification cyber requirements, CAA or MAA/DE&S certification bodies, TEMPEST, Inter-Domain Gateways, Cross Domain Solutions, embedded or aerospace security architectures, and programmable logic devices and their development tools.
- Ideally, candidates are sole UK nationals with no other citizenships.
Benefits
- Comprehensive and competitive benefits package available at little to no cost to full-time employees, supporting health and recovery.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.