Senior Embedded Security Engineer: Bootchain & Hardening

Anduril Industries; Irvine (CA); On-site; USD 220,000 - 292,000; Full time

Job summary

Anduril Industries is hiring a Senior Software Engineer to own product security for the Sentry Tower platform. You’ll manage the trusted boot chain across NVIDIA Jetson compute generations, including signed firmware and UEFI Secure Boot, plus encrypted root filesystems.

You will also define hardening postures, handle key management with HSM-backed signing, and lead vulnerability management across the fielded fleet while partnering with the product security organization.

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Cryptographic engineering: PKI, certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle, and full-disk encryption.
• Strong Linux internals knowledge: patching, boot flow, kernel/initrd, systemd, privilege boundaries, and access control.
• Proficiency in C or Rust, plus shell scripting.
• Hardening and vulnerability-management on real systems, CVE triage, live patching.
• Ability to explain security decisions to engineers and stakeholders.
• US person status required. Active Secret clearance or eligible for reactivation.

Responsibilities

• Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot, signed kernel/initrd, and full-disk encryption.
• Manage signing keys with HSM-backed keys, development vs production trust roots, key rotation, and build-time enforcement.
• Define platform hardening postures: network exposure, privileges, USB/serial lockdown, and fielded vs bench configurations.
• Drive vulnerability management for the fleet: track CVEs, patching strategy for aging hardware, and security-state visibility.
• Collaborate with product security to translate requirements into shippable implementations and act as security liaison.

Skills

Linux security

C or Rust

Kernel internals

HSM / PKCS#11

Network hardening

Tools

NVIDIA Jetson

Job description

Anduril Industries is hiring a Senior Software Engineer to own product security for the Sentry Tower platform. You’ll manage the trusted boot chain across NVIDIA Jetson compute generations, including signed firmware and UEFI Secure Boot, plus encrypted root filesystems.

You will also define hardening postures, handle key management with HSM-backed signing, and lead vulnerability management across the fielded fleet while partnering with the product security organization.