Senior Vulnerability Engineer – Embedded Hardware Security

Anduril Industries; Boston (MA); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril Industries is seeking a Vulnerability Engineer for Anduril Cyber to discover novel vulnerabilities across embedded systems, firmware, and hardware/software boundaries. You will design research plans, build tooling, and collaborate with engineers to drive practical remediation.

This role requires strong research skills, hands-on Linux experience, and the ability to obtain a U.S. security clearance. Join a mission-driven team developing secure defense technology.

Qualifications

• Strong experience discovering vulnerabilities in firmware, applications, network services, embedded Linux systems, drivers, protocols, IoT devices, or hardware-adjacent systems.
• Proficiency with one or more programming languages used for vulnerability research and tooling, such as Python, C, C++, Rust, or Go.
• Experience with fuzzing, harness development, crash triage, exploitability analysis, source-code review, binary analysis, or dynamic instrumentation.
• Ability to reason about memory corruption, logic flaws, authentication and authorization failures, unsafe parsing, concurrency issues, insecure update flows, and trust-boundary failures.
• Hands-on familiarity with Linux, embedded systems, networking, debugging, and common security research tooling.
• Ability to communicate vulnerability impact, reproduction steps, and mitigation options clearly to both research and engineering audiences.
• Demonstrated bias toward practical, mission-enabling security outcomes rather than purely theoretical findings.
• Must be eligible to obtain and maintain a U.S. security clearance.
• Experience evaluating vulnerabilities across embedded protection mechanisms such as secure boot, firmware update paths, key storage, memory protection, and debug interface controls.
• Comfort working with lab-based vulnerability validation using hardware interfaces, protocol analyzers, debuggers, or instrumented test setups.

Responsibilities

• Find novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
• Design and execute vulnerability research plans that combine code review, reverse engineering, fuzzing, emulation, dynamic instrumentation, hardware analysis, and adversarial testing.
• Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, and proof-of-concept tooling to turn research hypotheses into reproducible findings.
• Analyze root cause, exploitability, operational impact, and mitigation options for discovered vulnerabilities.
• Partner with reverse engineers, product security engineers, embedded software engineers, hardware engineers, and systems teams to validate findings and drive practical remediation.
• Write clear technical reports that include evidence, reproduction steps, exploitability assessment, impact, mitigations, and follow-on research opportunities.
• Design hardware-in-the-loop vulnerability experiments that combine software exploitation, protocol analysis, physical interfaces, and lab instrumentation.
• Develop tooling to automate experiment orchestration, device interaction, data collection, crash triage, and vulnerability reproduction.

Skills

Vulnerability research

Embedded systems

Fuzzing

Reverse engineering

C/C++/Rust

Python

Threat modeling

Communication

Security clearance

Tools

Ghidra

IDA Pro

Binary Ninja

QEMU

Frida

GDB/LDB

Job description

Anduril Industries is seeking a Vulnerability Engineer for Anduril Cyber to discover novel vulnerabilities across embedded systems, firmware, and hardware/software boundaries. You will design research plans, build tooling, and collaborate with engineers to drive practical remediation.

This role requires strong research skills, hands-on Linux experience, and the ability to obtain a U.S. security clearance. Join a mission-driven team developing secure defense technology.