← All roles

Senior Vulnerability Engineer

Anduril· AFS : Discovery Engineering : Cyber
Apply on company site
Hybrid (Boston, MA), Hybrid (Costa Mesa, CA), Hybrid (Washington, DC)$191k - $253kFull-timePosted 3w ago

About the role

Vulnerability-focused role within Anduril Cyber to discover novel vulnerabilities in hardware and software systems, conduct rigorous research, and produce reproducible technical artifacts and remediation guidance.

Responsibilities

  • Find novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
  • Design and execute vulnerability research plans that combine code review, reverse engineering, fuzzing, emulation, dynamic instrumentation, hardware analysis, and adversarial testing.
  • Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, and proof-of-concept tooling to turn research hypotheses into reproducible findings.
  • Analyze root cause, exploitability, operational impact, and mitigation options for discovered vulnerabilities.
  • Partner with reverse engineers, product security engineers, embedded software engineers, hardware engineers, and systems teams to validate findings and drive practical remediation.
  • Write clear technical reports that include evidence, reproduction steps, exploitability assessment, impact, mitigations, and follow-on research opportunities.
  • Design hardware-in-the-loop vulnerability experiments that combine software exploitation, protocol analysis, physical interfaces, and lab instrumentation.
  • Develop tooling to automate experiment orchestration, device interaction, data collection, crash triage, and vulnerability reproduction.

Qualifications

  • Strong experience discovering vulnerabilities in firmware, applications, network services, embedded Linux systems, drivers, protocols, IoT devices, or hardware-adjacent systems.
  • Proficiency with one or more programming languages used for vulnerability research and tooling, such as Python, C, C++, Rust, or Go.
  • Experience with fuzzing, harness development, crash triage, exploitability analysis, source-code review, binary analysis, or dynamic instrumentation.
  • Ability to reason about memory corruption, logic flaws, authentication and authorization failures, unsafe parsing, concurrency issues, insecure update flows, and trust-boundary failures.
  • Hands-on familiarity with Linux, embedded systems, networking, debugging, and common security research tooling.
  • Ability to communicate vulnerability impact, reproduction steps, and mitigation options clearly to both research and engineering audiences.
  • Demonstrated bias toward practical, mission-enabling security outcomes rather than purely theoretical findings.
  • Must be eligible to obtain and maintain a U.S. security clearance.
  • Experience evaluating vulnerabilities across embedded protection mechanisms such as secure boot, firmware update paths, key storage, memory protection, and debug interface controls.
  • Comfort working with lab-based vulnerability validation using hardware interfaces, protocol analyzers, debuggers, or instrumented test setups.

Skills

Required:Vulnerability researchProgramming for vulnerability toolingFuzzing and crash triage

Benefits

  • Top-tier benefits for full-time employees (comprehensive, competitive health, recovery, and future-planning coverage).
  • Equity grants included in the majority of full-time offers and considered part of total compensation.
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Anduril

defense-aero-and-safetyliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anduril