Senior Software Engineer (Android VMs)
Anduril IndustriesBase Salary
$191k - $253k/yr
Responsibilities
- Design, build, and maintain Android VMs running on crosvm, including VMM configuration, virtio device models, and guest/host integration.
- Bring up and boot Android guest images across the kernel, bootloader, init, and Android framework layers.
- Harden the virtualization boundary by reducing attack surface, sandboxing device backends, and analyzing guest-to-host and host-to-guest threats.
- Implement and validate secure boot and VM chain-of-trust features, including measured and verified boot, key management, and rollback protection.
- Analyze and mitigate Android VM security issues and contribute to threat modeling, security reviews, and vulnerability remediation.
- Debug low-level issues across the hypervisor/VMM, guest kernel, and Android userspace using appropriate tracing and debugging tools.
- Collaborate with platform, kernel, and security teams to resolve issues spanning hardware, firmware, and software.
- Document architecture, security properties, trust boundaries, and design decisions.
Requirements
- Strong systems programming experience in C/C++ and Rust, including memory safety, concurrency, and performance optimization under real constraints.
- Hands-on experience with crosvm or a comparable VMM such as QEMU, rust-vmm, or Firecracker, including device models, virtio, VM lifecycle, and VMM configuration.
- Understanding of virtualization and hardware-assisted virtualization, including KVM, guest/host memory management, vCPUs, MMIO, IOMMU, and virtio transport.
- Knowledge of Android VM security, guest/host isolation, VMM and device-backend sandboxing, and guest-to-host attack surfaces.
- Knowledge of Android platform security fundamentals, including SELinux, verified boot, AVB, dm-verity, keystore, KeyMint, and the Android trust model.
- Knowledge of secure boot and chain-of-trust concepts, including measured versus verified boot, signing, key management, rollback protection, and roots of trust.
- Ability to work from specifications, kernel and driver source, and register-level documentation.
- Ability to debug low-level systems issues using kernel logs, ftrace, perf, gdb, and VMM tracing or logging across host and guest environments.
- Git proficiency.
- Eligibility to obtain and maintain a U.S. Security Clearance.
- Preferred experience includes Android Virtualization Framework, pVM/protected VMs, microdroid, Linux kernel development, drivers, virtio backends/frontends, kernel debugging, TEE/TrustZone, hardware roots of trust, Android bootloaders, cryptographic key provisioning, attestation, VM and device lifecycle management, fuzzing, seccomp, minijail, VMM hardening, CI for systems/kernel builds, and automated VM image testing.
- Additional desirable experience includes Qualcomm platform security, QFPROM/eFuses, QTEE, PBL/SBL/XBL, secure debug, authenticated debug, anti-rollback, AOSP, crosvm, rust-vmm, upstream Linux kernel contributions, Android CTS/VTS, or comparable platform validation.
Benefits
- Comprehensive competitive benefits are available at little to no cost to full-time employees.
- Highly competitive equity grants are included in the majority of full-time offers.
- The role is a full-time position.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.