Senior Embedded Security Engineer: Boot & Hardening

Anduril-1; Irvine (CA); On-site; USD 220,000 - 292,000; Full time

Job summary

Anduril Industries in Irvine, CA is seeking a Senior Software Engineer focused on embedded product security for the Sentry Tower platform. You will own the trusted boot chain across NVIDIA Jetson compute generations, implement hardware-backed signing, and maintain a robust hardening posture and patch strategy for fielded systems.

You will work closely with our product security organization to translate requirements into secure, shippable implementations and help guide accreditation efforts.

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Practical cryptographic engineering: PKI, certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
• Strong Linux internals knowledge, particularly boot flow, patching, kernel/initrd, systemd, privilege boundaries, and filesystem/device access control.
• Proficiency in C or Rust, plus the ability to work fluently in shell.
• Hardening and vulnerability-management experience on real systems: attack-surface reduction, CVE triage, and live patching strategies.
• Ability to explain a security decision to engineers and program stakeholders.
• US person status required; Active US Secret clearance or eligible for reactivation.

Responsibilities

• Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernel and initrd, and full-disk encryption with automated unlock.
• Own signing key management and the infrastructure behind it: HSM-backed keys, separation of development and production trust roots, key rotation, and build-time enforcement that the right keys sign the right artifacts.
• Define and implement the platform’s hardening postures, spanning network exposure and firewall policy, privilege and sudo restriction, serial console and USB lockdown, and the difference between a locked-down fielded system and a debuggable bench unit.
• Drive vulnerability management for the fielded fleet: track CVEs against our kernel and userspace, own the patching strategy for hardware approaching vendor end-of-life, and keep a clear picture of fleet security state.
• Partner with our product security organization to turn security requirements into shippable implementations, act as our team’s security liaison, and support program-specific accreditation efforts.

Skills

Secure boot engineering

C or Rust

Shell scripting

Linux internals

Cryptographic engineering

US person status

Tools

NVIDIA Jetson secure boot

Nix/NixOS

Buildroot / Yocto

HSM / PKCS#11

TPM / measured boot

Bazel

Job description

Anduril Industries in Irvine, CA is seeking a Senior Software Engineer focused on embedded product security for the Sentry Tower platform. You will own the trusted boot chain across NVIDIA Jetson compute generations, implement hardware-backed signing, and maintain a robust hardening posture and patch strategy for fielded systems.

You will work closely with our product security organization to translate requirements into secure, shippable implementations and help guide accreditation efforts.