Senior Embedded Security Engineer: Secure Boot & Hardening

Anduril Industries, Inc.; Irvine (CA); On-site; USD 220,000 - 292,000; Full time

Job summary

Anduril Industries is seeking a Senior Software Engineer focused on product security for the Sentry Tower platform. You will own the trusted boot chain across NVIDIA Jetson compute generations, implementing signed firmware, kernels, and encrypted root filesystems with HSM-backed keys.

You will also define runtime hardening and drive vulnerability management for a fielded fleet, collaborating with the internal product security organization to translate requirements into ship-ready security

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Practical cryptographic engineering skills: PKI and certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
• Strong Linux internals knowledge, particularly patching, boot flow, kernel/initrd, systemd, privileges, and access control.
• Proficiency in C or Rust, plus the ability to work fluently in shell.
• Hardening and vulnerability-management experience on real systems: CVE triage and live patching strategies.
• Ability to explain security decisions to engineers and program stakeholders.
• US person status required. Active US Secret clearance or eligible for reactivation.

Responsibilities

• Own the signed boot chain across compute generations: firmware and bootloader signing, Secure Boot key hierarchies, signed kernel/initrd, and full-disk encryption.
• Manage signing keys and infrastructure: HSM-backed keys, separation of development/production roots, key rotation, build-time enforcement.
• Define and implement platform hardening postures: network exposure, privilege restrictions, serial console, USB lockdown, fielded vs bench units.
• Drive vulnerability management for the fleet: track CVEs, patching strategy for hardware near end-of-life, maintain fleet security state.
• Partner with product security to turn requirements into shippable implementations and support accreditation efforts.

Skills

Linux internals

Secure boot

Cryptography

C or Rust

Shell scripting

Vulnerability management

Communication to engineers

Tools

NVIDIA Jetson Secure Boot

Job description

Anduril Industries is seeking a Senior Software Engineer focused on product security for the Sentry Tower platform. You will own the trusted boot chain across NVIDIA Jetson compute generations, implementing signed firmware, kernels, and encrypted root filesystems with HSM-backed keys.

You will also define runtime hardening and drive vulnerability management for a fielded fleet, collaborating with the internal product security organization to translate requirements into ship-ready security