Platform Software Security Engineer, Air Defense
Anduril Industries · Irvine, California, United States
About this role
## Anduril Industries — Platform Software Security Engineer (Air Defense) ### About Anduril Anduril is a defense technology company transforming U.S. and allied military capabilities with advanced technology. Its family of systems is powered by **Lattice OS**, an AI-powered operating system that turns thousands of data streams into a real-time, 3D command and control center. ### About the Team The **Air Defense team** builds robots that detect other robots and help knock them out of the sky. The team delivers mission-critical capabilities across the kill chain—**detection, tracking, identification, deterrence, and defeat**—using a networked family of sensors and effectors. They develop, test, deploy, and sustain the **Anduril Air Defense Family of Systems (FoS)** in challenging operational environments worldwide. ### About the Job Air Defense products are deployed in austere and often secure environments where physical access by an adversary is realistic. That makes product security a **hardware-and-software** problem. This is a **new role** focused on owning product security for the Air Defense platforms. You’ll be the technical driver for security across embedded Linux, firmware, and hardware interfaces, and the connective tissue between teams to ensure the product ships securely. You’ll also drive hands-on platform work such as updating firmware, updating fusing tools, improving encryption algorithms, and building/re-imaging towers using a **NixOS-based build system**. --- ## What You’ll Do - Drive hands-on platform security work: updating firmware, improving encryption algorithms, updating fusing tools, and building/re-imaging towers via the **NixOS-based image pipeline**. - Own the **signed boot chain** across compute generations (firmware/bootloader signing, **UEFI Secure Boot** key hierarchies, signed kernel/initrd, and full-disk encryption with automated unlock). - Own **signing key management** and infrastructure (HSM-backed keys, separation of development vs. production trust roots, key rotation, and build-time enforcement). - Define and implement platform **hardening postures** (network exposure/firewall policy, privilege & sudo restriction, serial console & USB lockdown, and differences between locked-down fielded systems vs. debuggable bench units). - Drive **vulnerability management** for the fielded fleet (track CVEs, own patching strategy for hardware near vendor end-of-life, maintain a clear picture of fleet security state). - Serve as the technical interface between engineering, product, and program teams—decomposing security requirements into engineering tasks and driving them to completion. - Partner with the product security organization to turn security requirements into shippable implementations and support program-specific accreditation and exportability efforts. --- ## Required Qualifications - **4+ years** of professional software engineering with a security focus on **embedded Linux**. - Hands-on experience implementing a **secure boot chain** (code signing, chain of trust, **UEFI Secure Boot** or equivalent vendor secure boot). - Practical cryptographic engineering skills: **PKI/certificate hierarchies**, **HSM/PKCS#11-backed signing**, key lifecycle management, and **full-disk encryption**. - Strong Linux internals knowledge (patching, boot flow, kernel/initrd, systemd, privilege boundaries, filesystem/device access control). - Proficiency in **C, C++, or Rust**, plus comfort working fluently in **sh
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.