Platform Software Security Engineer, Air Defense

Responsibilities

You will drive platform security by managing firmware, encryption, and signed boot chains for air defense hardware. You will also act as the technical liaison between engineering and program teams to implement security requirements and manage fleet vulnerabilities.

Requirements

Candidates must have 4+ years of professional software engineering experience with a focus on embedded Linux and secure boot implementations. Proficiency in C, C++, or Rust and the ability to work hands-on with hardware at a lab bench are required.

Skills

• Embedded Linux
• Secure boot
• Cryptographic engineering
• Firmware development
• C
• C++
• Rust
• NixOS
• Yocto
• Buildroot
• Vulnerability management
• PKI
• HSM
• Hardware security
• Shell scripting
• Systemd

Benefits

• Health insurance
• Stock options
• Comprehensive benefits package

About this role

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.
ABOUT THE TEAM
The Air Defense team builds robots that find other robots and knock them out of the sky. At a time when air superiority can no longer be taken for granted, the Air Defense Team provides mission critical capabilities to warfighters. From detection to tracking, identification, deterrence, and defeat, our family of networked sensors and effectors enables our customers to rapidly close the kill chain against a broad range of Unmanned Aerial System (UAS) threats. Working across product, engineering, sales, logistics, operations, and mission success, the Air Defense team develops, tests, deploys, and sustains the Anduril Air Defense Family of Systems (FoS) in challenging operational environments worldwide.
ABOUT THE JOB

Air Defense products are deployed to austere and often secure environments, some in contexts where the device itself is a sensitive asset and physical access by an adversary is a realistic threat. That makes product security a hardware-and-software problem, not a policy exercise. As our international portfolio grows—the compliance and exportability requirements on our platform are growing with it. We're hiring for someone to focus on these challenges, a Software Engineer to own product security for the Air Defense platforms.

This is a new role, born from the recognition that security for fielded defense hardware is a nuanced discipline that deserves focused investment rather than ad-hoc coverage. You'll be the technical driver for security on the platform—hands-on with embedded Linux, firmware, and hardware interfaces—while also serving as the connective tissue between the teams whose work has to come together for the product to ship securely. You'll also drive the hands-on platform work that supports it—updating firmware, updating fusing tools, improving encryption algorithms, and building and re-imaging towers using our NixOS-based build system.

WHAT YOU'LL DO
Drive hands-on platform security work: updating firmware, improving encryption algorithms, updating fusing tools, and building and re-imaging towers through our NixOS-based image pipeline.
Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernel and initrd, and full-disk encryption with automated unlock.
Own signing key management and the infrastructure behind it: HSM-backed keys, separation of development and production trust roots, key rotation, and build-time enforcement that the right keys sign the right artifacts.
Define and implement the platform's hardening postures, spanning network exposure and firewall policy, privilege and sudo restriction, serial console and USB lockdown, and the difference between a locked-down fielded system and a debuggable bench unit.
Drive vulnerability management for the fielded fleet: track CVEs against our kernel and userspace, own the patching strategy for hardware approaching vendor end-of-life, and keep a clear picture of fleet security state.
Serve as the technical interface between engineering, product, and program teams decomposing security requirements into concrete engineering tasks and driving them to completion across the platform.
Partner with our product security organization to turn security requirements into shippable implementations, act as the team's security liaison, and support program-specific accreditation and exportability efforts as our international portfolio grows.
REQUIRED QUALIFICATIONS
4+ years of professional software engineering with a security focus on embedded Linux systems.
Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or an equivalent vendor secure boot implementation.
Practical cryptographic engineering skills: PKI and certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
Strong Linux internals knowledge, particularly in patching, boot flow, kernel and initrd, systemd, privilege boundaries, and filesystem and device access control.
Proficiency in C, C++, or Rust, plus the ability to work fluently in shell.
Experience building or modifying embedded Linux system images—Yocto, Buildroot, or NixOS. Comfort working at the layer where OS configuration meets hardware bring-up.
Practical hardening and vulnerability-management experience on real systems: attack-surface reduction, CVE triage on a deployed fleet, and live patching strategies that don't break the product.
Ability to work hands-on with hardware—comfortable at a lab bench interfacing with compute boards, serial consoles, and firmware tooling.
Ability to explain a security decision to engineers who need to implement it, and to a program stakeholder who needs to accept the residual risk.
US person status required. Active US Secret clearance, or a previously granted Secret clearance eligible for reactivation.
PREFERRED QUALIFICATIONS
Experience with NVIDIA Jetson secure boot specifically, or with another SoC vendor's secure boot and fusing workflow.
Familiarity with measured boot, TPMs, or remote attestation.
Experience with NixOS or Nix for building system images. Adjacent depth in Yocto or Buildroot is a strong substitute—these are the most transferable skill sets to our NixOS-based pla...

About Anduril Industries

Non-profit Organizations · 2-10 employees