About the Role
Anduril Industries is a defense technology company seeking a product security engineer to develop novel security tooling, discover vulnerabilities, and secure advanced technologies including AI systems, command and control platforms, aerospace vehicles, and long-range sensors. The ideal candidate will have a background in electrical or software engineering with a focus on platform security, or a related product/application security role. They will be capable of conducting security architecture reviews, researching and mitigating exploits, and collaborating with engineering teams to build product resiliency.
Responsibilities
- Owns the development and maturation of security features for Anduril’s products
- Authors and maintains security documentation including System Security Plans, Threat Analysis and Risk Assessments, and compliance evidence
- Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
- Collaborates with manufacturing and operations teams to develop secure handling and operational processes
- Engages with teams to remediate uncovered weakness in designs, implementations, integrations, and processes
- Integrates and matures Product Securitys suite of tooling thought Anduril’s products
- Conducts security assessments including architecture review, source code analysis, configuration auditing, and adversarial testing
Requirements
- Proficient with one or more programming languages (e.g. C/C++, Golang, Rust, Python)
- Experience assessing security of firmware, applications, network, IoT, or embedded systems
- Experience developing features for and improving security of firmware, applications, network, or embedded systems
- Experience building, testing, and delivering production-ready systems, especially for embedded and/or Linux systems
- Experience with structured threat modelling and risk assessment methodologies
- Experience in building and security autonomous systems and their unique threat model
- Experience in any previous military or defence domain; land, air, sea desirable but not mandatory
- Familiarity with anti-tamper and reverse engineering hardware and software mechanisms
- Strong and professional communication skills (written and verbal)
- Must be eligible to obtain and maintain a UK Security Clearance to a minimum of SC level
- Must be a UK citizen
Skills
- Platform security
- Product security
- Application security
- Security architecture reviews
- Exploit research and mitigation
- Building resiliency into products
- C/C++
- Golang
- Rust
- Python
- Firmware security assessment
- Application security assessment
- Network security assessment
- IoT security assessment
- Embedded systems security assessment
- Threat modeling
- Risk assessment
- Autonomous systems security
- Anti-tamper mechanisms
- Reverse engineering
- UK Ministry of Defence Cyber Security Model
- UK Government Security Classifications
- DefStans
- Cyber Secure by Design
- JSP 440
- JSP 453
- JSP 604
- Defence Information Protection Notices (DIPNs)
- Industry Security Notices (ISNs)
- DO-326A/ED-202A
- SORA
- CAA Type Certification cyber requirements
- MAA/DE&S
- RF Emanation Protection
- TEMPEST
- Network Security Devices
- Inter-Domain Gateways
- Cross Domain Solutions
- Embedded systems security architecture
- Aerospace systems security architecture
- Cyber-physical systems security architecture
- Programmable logic devices
- Development tools
Salary/Compensations
- Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package.
Benefits
- Comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next.
About the Company
- Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology.
- By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold.
- Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center.
- As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.
Equal Opportunity
- Anduril is an equal-opportunity employer, and we encourage candidates from all backgrounds to apply.
- If you are someone passionate to work on problems that matter, we’d love to hear from you!
