← All roles

Senior Software Engineer, Embedded Product Security

Anduril· AFS : Counter Intrusion Engineering : Sentry Software Engineering
Apply on company site
Irvine, CAPosted 4w ago

About the role

Senior Software Engineer responsible for product security of the Sentry Tower platform, including trusted boot, runtime hardening, key management, and vulnerability management for NVIDIA Jetson-based hardware in secure perimeters.

Responsibilities

  • Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernel and initrd, and full-disk encryption with automated unlock.
  • Own signing key management and the infrastructure behind it: HSM-backed keys, separation of development and production trust roots, key rotation, and build-time enforcement that the right keys sign the right artifacts.
  • Define and implement the platform’s hardening postures, spanning network exposure and firewall policy, privilege and sudo restriction, serial console and USB lockdown, and the difference between a locked-down fielded system and a debuggable bench unit.
  • Drive vulnerability management for the fielded fleet: track CVEs against our kernel and userspace, own the patching strategy for hardware approaching vendor end-of-life, and keep a clear picture of fleet security state.
  • Partner with our product security organization to turn security requirements into shippable implementations, act as our team’s security liaison, and support program-specific accreditation efforts.

Qualifications

  • 4+ years of professional software engineering with a security focus on Linux or embedded systems.
  • Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or an equivalent vendor secure boot implementation.
  • Practical cryptographic engineering skills: PKI and certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
  • Strong Linux internals knowledge, particularly in patching, boot flow, kernel and initrd, systemd, privilege boundaries, and filesystem and device access control.
  • Proficiency in C or Rust, plus the ability to work fluently in shell.
  • Practical hardening and vulnerability-management experience on real systems: attack-surface reduction, CVE triage on a deployed fleet, and live patching strategies that don’t break the product.
  • Ability to explain a security decision to engineers and program stakeholders.
  • US person status required. Active US Secret clearance, or a previously granted Secret clearance eligible for reactivation.

Skills

Required:Secure boot and chain of trustCryptographic engineeringLinux internalsProgramming languages

Benefits

  • Top-tier benefits for full-time employees (health, recovery, and related support).
  • Equity grants are included in the majority of full-time offers as part of total compensation.
  • Comprehensive benefits package available at little to no cost to employees.
Last updated Sep 23, 2026. Interested? Apply on the company site.

About Anduril

defense-aero-and-safetyliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anduril