SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 166,000 - 253,000 / annual
Anduril Industries is seeking a Security Engineer to lead the engineering core of its Governance, Risk, and Compliance (GRC) program. This role focuses on building the technical infrastructure that transforms Anduril's defense systems into continuous, defensible evidence of compliance—replacing manual audit preparation with automated, real-time monitoring.
You will own the design and implementation of a compliance evidence pipeline that collects data from Anduril's systems and maps it to normalized control models. Key responsibilities include: building reusable collectors and schemas as reference architectures to accelerate control implementation; establishing the system of record for controls, mappings, and evidence; surfacing control drift and routing findings to system owners with clear remediation paths; and translating defense compliance frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable technical checks.
You'll set technical direction for the GRC engineering function and mentor a growing team. This requires 6+ years of hands-on security engineering or GRC experience, strong programming ability (Go, Python, Rust), and proven expertise operationalizing compliance frameworks. You should have experience designing data collection and integration across cloud and SaaS systems, infrastructure-as-code proficiency (Terraform, AWS CDK), and a track record of mentoring engineers and driving cross-functional alignment.
Preferred experience includes continuous control monitoring platforms (Vanta, Drata, Hyperproof, OneTrust), security data lakes, log aggregation, STIG/ConMon scanning, CSPM, or Kubernetes hardening. You must be eligible to obtain and maintain a U.S. Secret clearance and comfortable working autonomously on ambiguous problems in a fast-paced defense technology environment.
