Team Overview

The Platform Security Engineering (PSE) team builds security into Anduril's products from architecture through production. We work directly with business lines to design and implement security solutions tailored to their systems — then promote proven patterns into shared, composable platform services that the entire organization can use. Our mission is threefold: build security solutions for business lines, promote those solutions into the platform, and enable teams to build and operate securely on their own. The work spans cryptographic protocols, operating system hardening, secure boot, hardware security integration, authentication systems, and distributed protocol security across embedded, edge, and cloud environments.

Job Description

We're looking for senior and staff-level software engineers to design and build security solutions across Anduril's product ecosystem. You'll partner directly with business line engineering teams to understand their systems, threat models, and security requirements — then design and implement solutions that range from custom, business-line-specific implementations to shared platform services. The problems you'll work on span the full stack — secure hardware, operating systems, container orchestration, distributed services, and cloud infrastructure — and you'll move between them as the mission demands. We value engineers who are strong generalists: comfortable learning new domains quickly and working across security boundaries rather than specializing in just one.

We're also open to hiring talented software engineers with less security-specific experience, provided they have a strong track record building production software at scale, learn fast, and are motivated to go deep on security.

Key Responsibilities

• Design and implement security features and services for business line products — including custom solutions when platform capabilities don't yet exist
• Identify patterns across business line implementations and promote them into shared, composable platform security services
• Build tooling, libraries, and reference implementations that enable engineering teams to adopt secure patterns independently
• Lead security architecture reviews and threat modeling for business line and platform systems
• Implement cryptographic protocols, key management systems, and certificate infrastructure
• Work across the technology stack: secure hardware (TPM, TEE), operating systems, container orchestration, and application-layer security
• Provide hands-on engineering support to business line teams adopting platform security services
• Collaborate with the Security Applications & Tools team on cross-cutting security infrastructure

Required Qualifications

• 6+ years of experience designing and developing production software in large-scale environments (8+ for Staff level)
• Proficient in at least one of: C++, Rust, or Go
• Strong software engineering fundamentals: you can design, build, and operate complex systems and pick up new domains quickly
• Experience working on security for distributed systems, or demonstrated ability and motivation to develop deep security expertise
• Ability to work directly with product and engineering teams to translate requirements into working implementations
• Comfortable working across multiple problem domains rather than specializing in a single area
• Strong communication skills with proven ability to negotiate and reach consensus across teams
• Eligible to obtain and maintain active U.S. Secret security clearance

Preferred Qualifications

Experience or willingness to learn in a subset of the following:

• Designing and implementing secure protocols, APIs, or cryptographic systems
• Integrating secure hardware (TPM, TEE, HSM)
• Operating system security and hardening (Linux)
• Securing Kubernetes deployments and container runtimes
• Embedded systems or robotics security
• Secure cloud architectures (AWS or Azure)
• Performing security architecture reviews and threat modeling

Additionally valuable:

• Proficient in: TypeScript, React, Python
• Experience building shared libraries, SDKs, or platform services consumed by other engineering teams
• Knowledge of cryptographic primitives and best practices (key management, certificate lifecycles, secure key storage)
• Familiarity with compliance frameworks (STIGs, NIST) and translating requirements into engineering controls
• Experience with Nix build systems