ABOUT THE TEAM

Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defense technologies. As a SecOps Analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. As a Senior SecOps Analyst, you will serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. 

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders. As a Senior SecOps Analyst, you will serve as an incident commander as necessary.
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines, and being responsible with mentoring and guiding junior analysts.

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!

ABOUT THE TEAM

Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defense technologies. As a SecOps Analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. As a Senior SecOps Analyst, you will serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. 

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders. As a Senior SecOps Analyst, you will serve as an incident commander as necessary.
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines, and being responsible with mentoring and guiding junior analysts.

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!

ABOUT THE TEAM

Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defense technologies. As a SecOps Analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. As a Senior SecOps Analyst, you will serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. 

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders. As a Senior SecOps Analyst, you will serve as an incident commander as necessary.
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines, and being responsible with mentoring and guiding junior analysts.

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!

ABOUT THE TEAM

We're seeking a senior systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• 8+ years of experience and a Bachelor's degree or equivalent education/work experience.
• Evidence of leading a team to solve complex security engineering challenges.
• Able to evaluate trade spaces and offer optimal security solutions against program risks using advanced knowledge and sound judgement.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security
• Experience creating and integrating with system design documentation in MBSE tools
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with government or national security space systems

ABOUT THE TEAM

We're seeking a staff systems security engineer to will drive security engineering principles into design and integration with other systems internal and external to Anduril to ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors.

The ideal candidate has a background in systems of systems, systems, electrical and/or software engineering with deep expertise in embedded systems security. They will perform in-depth security architecture assessments, identify and mitigate vulnerabilities and exploits, and work cross-functionally to bake security into Anduril products.

ABOUT THE JOB

WHAT YOU’LL DO

• This is not an ISSO or ISSM role.
• Own security end-to-end for assigned products—derive and decompose security requirements from customer needs and threat intelligence, design security architectures, and manage security through the full product lifecycle
• Implement security features and capabilities, develop and execute comprehensive security test strategies at multiple integration levels, and support major milestone deliveries (SRR, PDR, CDR, TRR, PRR)
• Brief security architectures and approaches to government customers and program leadership, translating complex security concepts for diverse audiences
• Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals
• Collaborate with security assessment teams to assess Anduril’s products and integrated components to uncover potential weaknesses
• Collaborate cross-functionally with engineering teams to translate architectural requirements into implementations, and coordinate with security teams on threat modeling, validation, and testing

REQUIRED QUALIFICATIONS

• Typically 12+ years of experience and a Bachelors degree or equivalent education/work experience.
• Demonstrable ability to address complex, high-stakes security engineering challenges across multiple programs within a major area of business.
• Evidence of recognized expertise contributing to risk resolution on cross-functional initiatives.
• Experience in one or more of the following fields: Systems Security Engineering, Cybersecurity, Systems Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science.
• Familiarity with security-relevant features on embedded hardware / FPGAs (e.g., secure boot, key management, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems.
• Ability to effectively brief and interact regularly with highly technical government customers.
• Strong understanding of the “why” behind the product, systems, and security design.
• A sincere commitment to a positive, inclusive, and collaborative culture.
• Excellent verbal & written communication skills.
• Currently possesses and is able to maintain at least a final active US Secret security clearance with SAP eligibility.
• Must be able to obtain a Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Excels at the above listed Requirements.
• Possesses and able to maintain a U.S. TS Security clearance with SCI and/or SAP eligibility.
• Strong skills in one or more programming languages (e.g., Python, Rust, Go, C/C++).
• Experience assessing security of firmware, applications, network, IoT, or embedded systems.
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503, CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Experience developing cyber documentation for USG customers.
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security.
• Experience creating and integrating with system design documentation in MBSE tools.
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test.
• Experience executing the Anti-Tamper process and authoring associated documentation.
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above.
• Experience working with government or national security space systems.

ABOUT THE TEAM

At Anduril we are developing cutting-edge artificial intelligence systems, command and control platforms, and autonomous systems across air, land, maritime, and space domains. We are looking for Systems Security Engineers to lead a mission-focused, threat-informed approach to Anti-Tamper Engineering for the next generation of Anduril’s autonomous systems. In order to be successful at Anduril, a Systems Security Engineer needs to be fluent in areas of technical leadership, requirements analysis, design rigor, customer & stakeholder engagement and have a hands-on contributor mindset. This role will drive system security engineering principles into design and integration with other systems internal and external to Anduril. In short, this individual will own the execution of all security aspects of product development, production, and sustainment through the entire product lifecycle to ensure product resiliency in both export and US customer contracts.

WHAT YOU'LL DO

• Identify Critical Program Information (CPI) for various cutting-edge systems, including within the air, land, maritime, and space domains
• Design and implement Anti-Tamper mitigations to deter, detect, delay, and react to reverse engineering attempts
• Develop Anti-Tamper Plans and designs in concert with government personnel to mitigate security risks and maintain system performance
• Integrate holistic Systems Security Engineering processes
• Champion system security architecture development and requirements derivation, decomposition, and flow down for Anduril products with varying levels of system design maturity
• Design system and solution features with engineering teams to meet and exceed industry-standard security goals
• Consult and influence software, RF and electrical engineering architectures, features, and implementations
• Identify and prioritize mission-based security risks, translating complex threat landscapes into actionable engineering decisions
• Develop, document, orchestrate, and execute system security tests, demonstrations, evaluations, and assessments (including support for customer-led events)
• Develop, guide, and monitor technical documentation to capture trade studies, system designs, analyses, and results related to a system's security posture
• Support technical work products developed by the larger engineering team and support major milestone deliveries (e.g. SRR, SVR, PDR, CDR, TRR, PRR).

REQUIRED QUALIFICATIONS

• Experience in one or more of the following fields: Anti-Tamper Engineering, Systems Security Engineering, Cybersecurity, Systems Engineering, Mechanical Engineering, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Program Protection Implementation Plans, Software Security, and Anti-Tamper Engineering
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with Systems Security Engineering, reverse engineering, or embedded security on DoD programs
• Familiarity with Cybersecurity, Software Assurance, and Supply Chain Risk Management. To support program protection implementation on embedded weapon systems.
• Strong understanding of the "why" behind the product, systems, and security design
• Passion for continuous learning, particularly within security
• Desire for working in a fast-paced, continuously challenging environment
• Ability to effectively brief and interact regularly with a technically oriented government customer
• A sincere commitment to a positive, inclusive, and collaborative culture
• Excellent verbal & written communication skills
• Currently possesses and is able to maintain an active U.S. Secret security clearance with SAP and Top Secret eligibility

PREFERRED QUALIFICATIONS

• Expertise with Anti-Tamper methodologies for protecting critical program information
• Experience with embedded systems security including FPGA security, micro-electronics security, and hardware-based security solutions
• Implementation experience with security architectures for autonomous platforms, unmanned systems, embedded weapon systems, secure communications, or intelligence collection platforms
• Experience implementing security architectures for Group 3+ Unmanned Aircraft Systems or military aviation platforms, including fighters and tactical aircraft with integrated weapons systems
• Experience developing cryptographic solutions including key management systems
• Experience with embedded security architectures and techniques
• Experience with team leadership, mentoring, coaching, and teaching
• Experience with system design documentation in No Magic CAMEO
• Experience with security testing on DoD systems
• Experience with various operating systems including embedded Linux
• Leader by example
• Active U.S. Top Secret security clearance

ABOUT THE TEAM

Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defense technologies. As a SecOps Analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. As a Senior SecOps Analyst, you will serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. 

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders. As a Senior SecOps Analyst, you will serve as an incident commander as necessary.
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines, and being responsible with mentoring and guiding junior analysts.

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!