Senior Cyber Software EngineerNew$291K

Anduril Industries
Apply now

The opportunity

The Air Defense team is responsible for the cryptographic foundation and platform trust that makes Anduril's Air Defense products deployable in the world's most demanding environments. The team owns everything from firmware and secure boot to key management, anti-tamper, and the…

What you'll do

  • Implement and improve FIPS 140-3 validated encryption across products: algorithm selection, module boundaries, entropy sources, key derivation, and the validation evidence that keeps certification current.

  • Own the platform trust chain: secure and measured boot (U-Boot/UEFI), TPM-backed attestation, firmware signing, and rollback protection on embedded and edge hardware.

  • Design and implement full-disk and data-at-rest encryption, key management: and rotation, and key hierarchies that survive field conditions.

  • Build anti-tamper and zeroization: tamper detection and response, emergency erase, key destruction paths, and the tests that prove they work under adversarial conditions.

  • Engineer secure communications: protocol design and review, mTLS and workload identity, tunnels and gateways for cross-domain and air-gapped transport, and CNSA-compliant cipher suites.

  • Build audit and validation tooling: instrumentation that proves cryptographic and boot-time behavior, plus the harnesses, fuzzers, and adversarial tests that try to break your own designs.

What they're looking for

  • + years of relevant engineering experience, or equivalent depth from a: national-security cryptographic or capabilities-development background.
  • Direct experience with FIPS 140-2/140-3 validation, CSfC, Type 1 encryption, HAIPE, or KMI.
  • CNSA 2.0 / Suite B implementation, or post-quantum cryptography migration work.
  • Vulnerability research, reverse engineering, exploit development, or hardware: attack experience (fault injection, side channel, JTAG/SWD).
  • Anti-tamper, TEMPEST, or physical security engineering for deployed systems.
  • Embedded and edge depth: U-Boot/UEFI, TPM/TEE (OP-TEE, TrustZone), secure elements, and the realities of constrained or intermittently connected devices.
  • Rust or Golang shipped at production scale in a security-critical component,: or took a system through ATO or IATT as the responsible engineer.
  • Policy-as-code at scale (OSCAL, OPA/Rego, OpenSCAP, InSpec), plus Terraform,: Ansible or Nix, and Kubernetes hardening.