GRC Security Engineering Lead - Automate Compliance

Anduril-1; Washington (District of Columbia); On-site; USD 166,000 - 253,000; Full time

Benefits offered by this job

Equity grants

Top-tier benefits

Job summary

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead in Washington, DC to build the engineering core of our GRC program. Lead an engineering team, design automation checks, and drive evidence collection across systems to demonstrate compliance with CMMC, NIST, and FedRAMP standards.

You will architect scalable collectors, map evidence to a control model, and guide build-vs-buy decisions while ensuring timely remediation and risk management.

Qualifications

• 6+ years in security engineering, GRC, or a related role with hands-on automation or data pipelines.
• Strong programming ability in a general-purpose language (Go, Python, Rust, etc.).
• Hands-on experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2).
• Experience designing data collection and integration across cloud and SaaS systems (APIs, log/event pipelines, data lakes).
• Experience with infrastructure as code (e.g., Terraform, AWS CDK) in production.
• Track record of setting technical direction and mentoring engineers.
• Ability to work autonomously, own ambiguous problems, and align across partner teams.
• Eligible to obtain and maintain a U.S. Secret clearance.

Responsibilities

• Build the pipeline that collects evidence from Anduril's systems and maps it to a normalized control model.
• Construct reusable collectors and schemas as reference architectures so each new control is assembly, not reinvention.
• Stand up the system of record for controls, mappings, and evidence, and drive the build-vs-buy analysis.
• Surface control drift and route findings to system owners with remediation and risk-acceptance paths.
• Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable checks and pass/fail signals.
• Set technical direction and mentor a growing engineering team.

Skills

Security engineering

GRC

Go/Python/Rust

Cloud and SaaS data pipelines

Infrastructure as code

Mentoring engineers

US Secret clearance

Tools

Terraform

AWS CDK

Job description

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead in Washington, DC to build the engineering core of our GRC program. Lead an engineering team, design automation checks, and drive evidence collection across systems to demonstrate compliance with CMMC, NIST, and FedRAMP standards.

You will architect scalable collectors, map evidence to a control model, and guide build-vs-buy decisions while ensuring timely remediation and risk management.