Senior Security DevSecOps Engineer: CI/CD & Cloud

Xapply; Bellevue (WA); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril Industries is seeking a Senior Software Engineer to bridge security operations, platform architecture, and product delivery. You will collaborate with Firmware, Platform, OS, Client/App, and Cloud teams to design, implement, and verify secure fixes across the hardware-to-cloud lifecycle.

You will write proof-of-concepts, triage findings, and integrate security tooling into CI/CD pipelines, while leading threat modeling sessions and incident response activities.

Qualifications

• 8+ years of software engineering with a focus on security, systems engineering, or DevSecOps.
• Proven experience integrating security automation into build pipelines and patching vulnerabilities.
• Proficiency in at least two of the following: C/C++, Rust, Go, Python, or C#.

Responsibilities

• Automate security in CI/CD: Architect, integrate, and maintain automated security tooling (SAST, DAST, SCA, Secret Scanning, SBOM) in pipelines.
• Triage findings, translate alerts into Jira tickets with remediation guidance.
• Cross-Team Remediation: Prioritize and implement secure fixes with product teams to preserve velocity.
• Silicon-to-Cloud Threat Modeling: Lead threat modeling sessions for firmware, Android OS layers, client apps, and cloud backends.
• Incident Response: Participate in PSIRT, root-cause analysis, and vulnerability research.

Skills

C/C++

Rust

Go

Python

CI/CD

Security automation

Cross-functional leadership

Tools

GitHub Actions

CircleCI

AWS

Azure

Terraform

Kubernetes

Job description

Anduril Industries is seeking a Senior Software Engineer to bridge security operations, platform architecture, and product delivery. You will collaborate with Firmware, Platform, OS, Client/App, and Cloud teams to design, implement, and verify secure fixes across the hardware-to-cloud lifecycle.

You will write proof-of-concepts, triage findings, and integrate security tooling into CI/CD pipelines, while leading threat modeling sessions and incident response activities.