Senior Embedded Security Engineer — Secure Boot & HSM

Anduril-1; Irvine (CA); On-site; USD 220,000 - 292,000; Full time

Benefits offered by this job

Equity grants

Competitive benefits

Job summary

Anduril Industries seeks a Senior Software Engineer to own product security for embedded towers. You’ll implement the trusted boot chain, sign firmware, manage keys with an HSM, and enforce full-disk encryption across NVIDIA Jetson hardware.

You’ll also define runtime hardening, patching strategies for fielded fleets, and collaborate with our product security team to translate requirements into shippable, verifiable protections.

Qualifications

• 4+ years of professional software engineering with a security focus on Linux or embedded systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or equivalent.
• Practical cryptographic engineering skills: PKI/hierarchies, HSM or PKCS#11 signing, key lifecycle, and full-disk encryption.
• Strong Linux internals knowledge: patching, boot flow, kernel/initrd, systemd, access control.
• Proficiency in C or Rust, and shell fluency.
• Hardening and vulnerability-management experience on real systems: CVE triage, live patching strategies.
• US person status and eligibility for security clearance.

Responsibilities

• Own the signed boot chain across compute generations and manage key signing workflows.
• Define and implement hardening postures, including network exposure, privileges, and interfaces.
• Drive vulnerability management for the fielded fleet and patching strategies.
• Collaborate with product security to translate requirements into shipable implementations.
• Support accreditation efforts and act as security liaison for programs.

Skills

Secure boot implementation

Linux internals

C and Rust programming

Shell scripting

Cryptographic engineering

Vulnerability management

Clear communication

US person status

Tools

NVIDIA Jetson secure boot

Job description

Anduril Industries seeks a Senior Software Engineer to own product security for embedded towers. You’ll implement the trusted boot chain, sign firmware, manage keys with an HSM, and enforce full-disk encryption across NVIDIA Jetson hardware.

You’ll also define runtime hardening, patching strategies for fielded fleets, and collaborate with our product security team to translate requirements into shippable, verifiable protections.