Senior Embedded Security Engineer: Secure Boot & Hardening

Linuxconfig; Irvine, Northern (CA, KY); Hybrid; USD 220,000 - 292,000; Full time

Job summary

Anduril Industries in Irvine, CA is seeking a Senior Software Engineer to own product security for the tower platform. You will secure the boot chain across NVIDIA Jetson compute and manage signed firmware, kernels, and encrypted root filesystems.

You will harden runtime posture, control network exposure, and oversee patching and vulnerability management for fielded fleets, coordinating with our product security team to turn requirements into deployable security features.

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Secure boot chain implementation: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Cryptographic engineering: PKI, certificates, HSM/PKCS#11, key lifecycle, and full-disk encryption.
• Strong Linux internals knowledge: patching, boot flow, kernel/initrd, systemd, privileges, filesystem and device access control.
• Proficiency in C or Rust, plus shell scripting.
• Hardening and vulnerability-management on real systems: CVE triage and live patching strategies.
• Ability to explain security decisions to engineers and program stakeholders.
• US person status required; active or eligible for reactivation of Secret clearance.

Responsibilities

• Own the signed boot chain across compute generations: firmware and bootloader signing, UEFI Secure Boot key hierarchies, signed kernel/initrd, and full-disk encryption.
• Own signing key management and infrastructure: HSM-backed keys, separation of development and production trust roots, key rotation, and build-time enforcement of correct signing.
• Define and implement the platform’s hardening postures: network exposure, privilege restrictions, serial console and USB lockdown.
• Drive vulnerability management for the fielded fleet: track CVEs, patching strategy for hardware near end-of-life, and fleet security state.
• Partner with the product security organization to turn security requirements into shippable implementations.

Skills

Embedded Linux security

Secure boot chain

Cryptographic engineering

Linux internals

C or Rust

Hardening and vulnerability management

Security communication

clearance requirement

Tools

NVIDIA Jetson

UEFI Secure Boot

HSM/PKCS#11

Signing infrastructure tooling

Job description

Anduril Industries in Irvine, CA is seeking a Senior Software Engineer to own product security for the tower platform. You will secure the boot chain across NVIDIA Jetson compute and manage signed firmware, kernels, and encrypted root filesystems.

You will harden runtime posture, control network exposure, and oversee patching and vulnerability management for fielded fleets, coordinating with our product security team to turn requirements into deployable security features.