GRC Automation Lead, Security Engineering

Anduril Industries; Boston (MA); On-site; USD 166,000 - 253,000; Full time

Benefits offered by this job

Equity grants

Top-tier benefits

Competitive compensation

Job summary

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will create automatable checks, establish a system of record, and drive build-vs-buy decisions.

You’ll lead a growing team, translate security frameworks into technical signals, and coordinate with partner teams to manage evidence, controls, and remediation across cloud and SaaS environments.

Qualifications

• 6+ years in security engineering, GRC, or a related role with automation experience.
• Strong programming ability in Go, Python, Rust, or similar.
• Hands-on experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2).
• Experience designing data collection and integration across cloud/SaaS (APIs, pipelines, data lakes).
• Infrastructure as code (Terraform, AWS CDK) in production environments.
• Ability to set technical direction and mentor engineers.
• Eligible to obtain and maintain a U.S. Secret clearance.

Responsibilities

• Build the pipeline that collects evidence from systems and maps to a normalized control model.
• Create reusable collectors and schemas as reference architectures.
• Stand up the system of record for controls, mappings, and evidence with build-vs-buy analysis.
• Surface control drift and route findings to owners with remediation paths.
• Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable checks and pass/fail signals.
• Set technical direction and mentor a growing engineering team.

Skills

Go, Python, Rust

Security engineering

GRC experience

Data pipelines

IaC (Terraform, AWS CDK)

Mentoring

Clearance readiness

Tools

Terraform

AWS CDK

GRC platforms (Vanta/Drata)

Job description

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will create automatable checks, establish a system of record, and drive build-vs-buy decisions.

You’ll lead a growing team, translate security frameworks into technical signals, and coordinate with partner teams to manage evidence, controls, and remediation across cloud and SaaS environments.