SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 156,000 - 253,000 / annual
Anduril Industries is seeking a Product Security Engineer to own security for assigned products and provide expert consultation on security architectures. This role is critical to securing Anduril's advanced defense technologies, including AI systems, command and control platforms, aerospace vehicles, and long-range sensors.
You will own the development and maturation of security features across Anduril's product suite. Key responsibilities include conducting complex security architecture reviews, researching and mitigating exploits against hardware and software systems, collaborating with engineering teams to build resiliency into products, and working with security assessment teams to uncover and remediate potential weaknesses. You'll also engage with manufacturing and operations teams to develop secure handling and operational processes.
The ideal candidate has a background in electrical or software engineering with a focus on platform security, or has successfully pivoted to a product or application security role. You should have hands-on experience assessing security of firmware, applications, networks, IoT, or embedded systems, and experience developing features to improve security in these domains. Strong proficiency in one or more programming languages (C/C++, Golang, Rust, Python) is required, along with familiarity with anti-tamper and reverse engineering mechanisms.
You must have experience building, testing, and delivering production-ready systems, particularly for embedded and Linux environments. A deep understanding of the "why" behind product, systems, and security design is essential. Strong written and verbal communication skills are critical for collaborating across teams.
U.S. TS security clearance eligibility is required. Preferred qualifications include an active TS clearance with SCI and/or SAP eligibility, familiarity with security architectures of embedded, aerospace, or cyber-physical systems, fluency in modern USG cyber methodologies (JSIG, ICD 503, NIST SP 800-160, CMMC), and experience with programmable logic devices.
