Senior Embedded Security Engineer: Secure Boot & Hardening

AI Chopping Block; Irvine, Northern (CA, KY); Hybrid; USD 220,000 - 292,000; Full time

Job summary

Anduril Industries seeks a Senior Software Engineer to own product security for the Sentry Tower platform, including trusted boot across NVIDIA Jetson generations with signed firmware, UEFI Secure Boot, encrypted root filesystems, and key management.

You will shape runtime hardening, manage patching for fleet security, and collaborate with our product security team to translate requirements into secure, shippable implementations while working with engineers under schedule constraints.

Qualifications

• 4+ years of professional software engineering with a security focus on Linux/embedded systems.
• Experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Cryptographic engineering: PKI, certificates, HSM/PKCS#11-backed signing, key lifecycle, full-disk encryption.
• Strong Linux internals: patching, boot flow, kernel/initrd, systemd, privilege boundaries, filesystems.
• Proficiency in C or Rust, and shell scripting.
• US person status with active Secret clearance or eligibility for reactivation.

Responsibilities

• Own the signed boot chain across compute generations: firmware, bootloader, UEFI, signed kernel/initrd, full-disk encryption.
• Manage signing keys and infrastructure: HSM-backed keys, trust roots, rotation, build-time enforcement.
• Define and implement platform hardening postures: network exposure, privileges, serial/USB lockdown.
• Drive vulnerability management for the fielded fleet: track CVEs, patching strategy for aging hardware.
• Partner with product security to translate requirements into shipped implementations and act as security liaison.

Skills

Linux security

Embedded systems

Secure boot chain

C or Rust

Shell scripting

Security clearance

Tools

NVIDIA Jetson

Job description

Anduril Industries seeks a Senior Software Engineer to own product security for the Sentry Tower platform, including trusted boot across NVIDIA Jetson generations with signed firmware, UEFI Secure Boot, encrypted root filesystems, and key management.

You will shape runtime hardening, manage patching for fleet security, and collaborate with our product security team to translate requirements into secure, shippable implementations while working with engineers under schedule constraints.