Senior Android VM Security Engineer (Crosvm/VMM)

Engg; Bellevue (WA); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril is seeking a Senior Software Engineer to design, implement, and harden Android VMs running on crosvm. You will work across the virtualization stack, from the VMM to secure boot, delivering production-quality, security-hardened Android VMs.

You'll own hard problems end to end, collaborate with platform and security teams, and set the technical direction for running Android securely in a VM. Eligibility for a U.S. security clearance is required.

Qualifications

• Strong systems programming in C/C++ and Rust with memory safety and concurrency.
• Hands-on experience with crosvm (or comparable VMM such as QEMU/rust-vmm).
• Solid understanding of virtualization and hardware-assisted virtualization (KVM, vCPUs, MMIO).
• Android VM security knowledge: guest/host isolation and sandboxing.
• Knowledge of verified boot, keystore and trust model basics.
• Experience debugging across host and guest stacks.
• Eligibility to obtain and maintain a U.S. security clearance.

Responsibilities

• Design, build, and harden Android VMs running on crosvm.
• Bring up and boot Android guest images inside a VM: kernel, bootloader, init.
• Harden the virtualization boundary and threat models.
• Implement and validate secure boot and chain-of-trust for the VM.
• Analyze and mitigate Android VM security issues; contribute to threat modeling.
• Debug across the stack using kernel logs, ftrace, gdb, and VM tracing.
• Collaborate with platform, kernel, and security teams to resolve cross-domain issues.
• Document architecture, security properties, trust boundaries, and design decisions.

Skills

C/C++

Rust

Low-level debugging

GDB

Git

System programming

Tools

crosvm

QEMU

rust-vmm

Job description

Anduril is seeking a Senior Software Engineer to design, implement, and harden Android VMs running on crosvm. You will work across the virtualization stack, from the VMM to secure boot, delivering production-quality, security-hardened Android VMs.

You'll own hard problems end to end, collaborate with platform and security teams, and set the technical direction for running Android securely in a VM. Eligibility for a U.S. security clearance is required.