Platform Software Security Engineer, Air Defense

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

ABOUT THE TEAM

The Air Defense team builds robots that find other robots and knock them out of the sky. At a time when air superiority can no longer be taken for granted, the Air Defense Team provides mission critical capabilities to warfighters. From detection to tracking, identification, deterrence, and defeat, our family of networked sensors and effectors enables our customers to rapidly close the kill chain against a broad range of Unmanned Aerial System (UAS) threats. Working across product, engineering, sales, logistics, operations, and mission success, the Air Defense team develops, tests, deploys, and sustains the Anduril Air Defense Family of Systems (FoS) in challenging operational environments worldwide.

ABOUT THE JOB

Air Defense products are deployed to austere and often secure environments, some in contexts where the device itself is a sensitive asset and physical access by an adversary is a realistic threat. That makes product security a hardware-and-software problem, not a policy exercise. As our international portfolio grows-the compliance and exportability requirements on our platform are growing with it. We're hiring for someone to focus on these challenges, a Software Engineer to own product security for the Air Defense platforms.

This is a new role, born from the recognition that security for fielded defense hardware is a nuanced discipline that deserves focused investment rather than ad-hoc coverage. You'll be the technical driver for security on the platform-hands-on with embedded Linux, firmware, and hardware interfaces-while also serving as the connective tissue between the teams whose work has to come together for the product to ship securely. You'll also drive the hands-on platform work that supports it-updating firmware, updating fusing tools, improving encryption algorithms, and building and re-imaging towers using our NixOS-based build system.

WHAT YOU'LL DO

• Drive hands-on platform security work: updating firmware, improving encryption algorithms, updating fusing tools, and building and re-imaging towers through our NixOS-based image pipeline.
• Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernel and initrd, and full-disk encryption with automated unlock.
• Own signing key management and the infrastructure behind it: HSM-backed keys, separation of development and production trust roots, key rotation, and build-time enforcement that the right keys sign the right artifacts.
• Define and implement the platform's hardening postures, spanning network exposure and firewall policy, privilege and sudo restriction, serial console and USB lockdown, and the difference between a locked-down fielded system and a debuggable bench unit.
• Drive vulnerability management for the fielded fleet: track CVEs against our kernel and userspace, own the patching strategy for hardware approaching vendor end-of-life, and keep a clear picture of fleet security state.
• Serve as the technical interface between engineering, product, and program teams decomposing security requirements into concrete engineering tasks and driving them to completion across the platform.
• Partner with our product security organization to turn security requirements into shippable implementations, act as the team's security liaison, and support program-specific accreditation and exportability efforts as our international portfolio grows.

REQUIRED QUALIFICATIONS

• 4+ years of professional software engineering with a security focus on embedded Linux systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or an equivalent vendor secure boot implementation.
• Practical cryptographic engineering skills: PKI and certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
• Strong Linux internals knowledge, particularly in patching, boot flow, kernel and initrd, systemd, privilege boundaries, and filesystem and device access control.
• Proficiency in C, C++, or Rust, plus the ability to work fluently in shell.
• Experience building or modifying embedded Linux system images-Yocto, Buildroot, or NixOS. Comfort working at the layer where OS configuration meets hardware bring-up.
• Practical hardening and vulnerability-management experience on real systems: attack-surface reduction, CVE triage on a deployed fleet, and live patching strategies that don't break the product.
• Ability to work hands-on with hardware-comfortable at a lab bench interfacing with compute boards, serial consoles, and firmware tooling.
• Ability to explain a security decision to engineers who need to implement it, and to a program stakeholder who needs to accept the residual risk.
• US person status required. Active US Secret clearance, or a previously granted Secret clearance eligible for reactivation.

PREFERRED QUALIFICATIONS

• Experience with NVIDIA Jetson secure boot specifically, or with another SoC vendor's secure boot and fusing workflow.
• Familiarity with measured boot, TPMs, or remote attestation.
• Experience with NixOS or Nix for building system images. Adjacent depth in Yocto or Buildroot is a strong substitute-these are the most transferable skill sets to our NixOS-based platform.
• Background in defense or government accreditation processes, or work against a formal security controls framework. Experience with international exportability requirements is a plus.
• Offensive security experience, including hardware attacks such as bus sniffing, glitching, or JTAG and boot interruption.
• Experience with supply chain security, artifact provenance, or SBOM tooling.
• Experience bringing new hardware features to life through software-bridging the gap between hardware capabilities and the platform software that exercises them.

US Salary Range

$167,000—$222,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: 

Benefits

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits.

Protecting Yourself from Recruitment Scams

Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.

To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:

• No Financial Requests:  Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.

• Please always verify communications:
  • Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address.
  • Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to [email protected]. 

• Exercise Caution with Unsolicited Outreach:  If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.

• What to Do If You Suspect Fraud:  Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to [email protected]. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts.

Data Privacy

To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. 

By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.