Senior Software Engineer, Embedded Product Security
Anduril IndustriesBase Salary
$220k - $292k/yr
Responsibilities
- Own the signed boot chain across compute generations, including firmware and bootloader signing, UEFI Secure Boot, signed kernel and initrd images, and full-disk encryption.
- Manage HSM-backed signing keys, development and production trust roots, key rotation, and build-time signing enforcement.
- Define and implement runtime hardening for network exposure, firewall policy, privileges, sudo, serial consoles, USB, and field-versus-bench configurations.
- Drive vulnerability management for the deployed fleet, including CVE tracking, patching strategy, and fleet security-state visibility.
- Partner with Product Security to implement requirements, serve as the team’s security liaison, and support program-specific accreditation efforts.
Requirements
- 4+ years of professional software engineering experience with a security focus on Linux or embedded systems.
- Hands-on experience implementing secure boot chains, code signing, chains of trust, and UEFI Secure Boot or an equivalent vendor implementation.
- Practical cryptographic engineering experience with PKI, certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
- Strong Linux internals knowledge covering patching, boot flow, kernels, initrds, systemd, privilege boundaries, and filesystem and device access control.
- Proficiency in C or Rust and fluency with shell.
- Experience with system hardening, attack-surface reduction, CVE triage on deployed fleets, and live patching strategies.
- US person status and an active US Secret clearance or previously granted Secret clearance eligible for reactivation are required.
- Preferred qualifications include NVIDIA Jetson secure boot, measured boot, TPMs, remote attestation, Nix or NixOS, Bazel, Buildroot, Yocto, defense accreditation, offensive hardware security, supply-chain security, artifact provenance, or SBOM tooling.
Benefits
- Competitive benefits are available at little to no cost to full-time employees, including health and recovery support.
- Highly competitive equity grants are included in the majority of full-time offers as part of the total compensation package.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.