Platform Software Security Engineer, Air Defense
Anduril IndustriesBase Salary
$167k - $222k/yr
Responsibilities
- Drive platform security work including firmware updates, encryption improvements, fusing-tool updates, and building or re-imaging towers through the NixOS-based image pipeline.
- Own the signed boot chain, including firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernels and initrds, and automated full-disk encryption unlock.
- Manage signing-key infrastructure with HSM-backed keys, separate development and production trust roots, key rotation, and build-time signing enforcement.
- Define and implement platform hardening for network exposure, firewall policy, privilege and sudo restrictions, serial consoles, USB access, and fielded versus bench configurations.
- Drive vulnerability management for the deployed fleet, including CVE tracking, patching strategy, vendor end-of-life hardware, and fleet security-state tracking.
- Translate security requirements into engineering tasks and coordinate their completion across engineering, product, and program teams.
- Act as the security liaison with product security and support accreditation and international exportability efforts.
Requirements
- 4+ years of professional software engineering experience with a security focus on embedded Linux systems.
- Hands-on experience implementing secure boot, code signing, chains of trust, and UEFI Secure Boot or an equivalent vendor implementation.
- Practical cryptographic engineering experience with PKI, certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
- Strong Linux internals knowledge covering patching, boot flow, kernel and initrd, systemd, privilege boundaries, and filesystem and device access control.
- Proficiency in C, C++, or Rust and fluency with shell scripting.
- Experience building or modifying embedded Linux images using Yocto, Buildroot, or NixOS, including OS configuration and hardware bring-up.
- Experience with system hardening, attack-surface reduction, CVE triage on deployed fleets, vulnerability management, and live patching.
- Hands-on hardware experience with compute boards, serial consoles, and firmware tooling.
- US person status and an active US Secret clearance or previously granted Secret clearance eligible for reactivation.
- Preferred qualifications include NVIDIA Jetson or other SoC secure boot and fusing experience, measured boot, TPMs, remote attestation, NixOS or Nix, Yocto or Buildroot, defense accreditation, formal security controls, exportability, offensive hardware security, supply chain security, artifact provenance, SBOM tooling, and hardware feature enablement.
Benefits
- Full-time employees receive comprehensive competitive benefits available at little to no cost.
- The role offers competitive equity grants in the majority of full-time offers.
- US base salary range is $167,000-$222,000.
- The posting requires US person status and a qualifying US Secret clearance.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.