Senior Embedded Security Engineer: Secure Boot & Hardening

Anduril; Irvine (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Anduril Industries is seeking a Senior Software Engineer to own product security for the Sentry Tower platform. You will secure boot, runtime hardening, and key management across NVIDIA Jetson compute, integrating signed firmware, encrypted root FS, and trusted updates.

You will collaborate with our product security team to translate requirements into shippable implementations, manage CVE tracking, and ensure fleet resilience against end-of-life hardware while maintaining a practical balance

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or vendor secure boot.
• Practical cryptographic engineering: PKI, certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
• Strong Linux internals knowledge: patching, boot flow, kernel/initrd, systemd, privilege boundaries, filesystem/device access control.
• Proficiency in C or Rust, with fluency in shell.

Responsibilities

• Own the signed boot chain across compute generations: firmware and bootloader signing, Secure Boot hierarchies, signed kernel/initrd, and full-disk encryption.
• Own signing key management and infrastructure: HSM-backed keys, separation of development/production roots, key rotation, and build-time enforcement of correct signing.
• Define and implement platform hardening postures: network exposure, privileges, serial console/USB lockdown, fielded vs bench configurations.
• Drive vulnerability management for the fleet: track CVEs, patching strategy for hardware nearing end-of-life, maintain fleet security state.
• Partner with product security to translate requirements into implementations and support accreditation efforts.

Skills

Secure boot

PKI

C or Rust

Linux internals

Security engineering

Job description

Anduril Industries is seeking a Senior Software Engineer to own product security for the Sentry Tower platform. You will secure boot, runtime hardening, and key management across NVIDIA Jetson compute, integrating signed firmware, encrypted root FS, and trusted updates.

You will collaborate with our product security team to translate requirements into shippable implementations, manage CVE tracking, and ensure fleet resilience against end-of-life hardware while maintaining a practical balance