Lead Security Engineer, GRC
Anduril IndustriesBase Salary
$166k - $253k/yr
Responsibilities
- Build evidence-collection pipelines and map evidence to normalized compliance control models.
- Construct reusable collectors and schemas so new controls can be assembled efficiently.
- Establish a system of record for controls, mappings, and evidence and lead build-versus-buy analysis.
- Detect control drift and route findings to system owners with remediation and risk-acceptance paths.
- Translate CMMC, NIST 800-171, NIST 800-53, FedRAMP, and related frameworks into automated technical checks and pass/fail signals.
- Set technical direction and mentor a growing engineering team.
Requirements
- At least 6 years of experience in security engineering, GRC, or a related role, including hands-on automation or data-pipeline development.
- Strong programming ability in a general-purpose language such as Go, Python, or Rust.
- Hands-on experience operationalizing CMMC, NIST 800-171, NIST 800-53, FedRAMP, or SOC 2 compliance frameworks.
- Experience designing data collection and integrations across cloud and SaaS systems, including APIs, log/event pipelines, and data lakes.
- Production experience with infrastructure as code such as Terraform or AWS CDK.
- Track record of setting technical direction and mentoring engineers.
- Ability to work autonomously, own ambiguous problems, and drive alignment across partner teams.
- Eligibility to obtain and maintain a U.S. Secret clearance.
- Preferred experience with continuous control monitoring or GRC platforms such as Vanta, Drata, Hyperproof, or OneTrust, or with building equivalent systems.
- Preferred experience with security data lakes, log aggregation, or data marts for querying.
- Preferred familiarity with STIG/ConMon scanning, CSPM, or Kubernetes hardening.
- Preferred experience in fast-paced, high-growth defense technology environments.
Benefits
- Competitive full-time benefits package available at little to no cost to employees.
- Highly competitive equity grants are included in the majority of full-time offers and are part of the total compensation package.
About Anduril Industries
Anduril is not a traditional defense contractor. We are shaping the future of defense, transforming US & allied military capabilities with advanced technology. We emphasize speed and results and control our products from start to finish, including funding R&D to selling finished products off the shelf. Today, Anduril is in a rapid growth phase, deploying technology in diverse locations and developing path-making products that will change defense forever. We believe that everyone at Anduril can be a catalyst. Your perspective can change lives, and we want to help you make your mark. Our team includes thinkers and doers working interdependently. We bring the brightest minds and best-in-class talent together with veterans who have lived the problems of our warfighters. If you like building quickly and seeing your work deployed in the real world, we want you at Anduril. With offices in Orange County, Washington DC, Seattle, Boston, Atlanta, London, and Sydney, our reach is wide. Check out our careers page at https://www.anduril.com/careers or send us an email at careers@anduril.com.