Senior Vulnerability Engineer, Embedded & Hardware Security

Anduril Industries; Costa Mesa (CA); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril Industries is seeking a Vulnerability Engineer for Anduril Cyber in Costa Mesa, CA, to uncover novel vulnerabilities across hardware and software systems including embedded firmware. The role emphasizes rigorous research, reproducible artifacts, and collaboration with cross‑functional teams to drive remediation.

Ideal candidates will own vulnerability workflows from discovery through writeups, with hands-on Linux, embedded systems, and security tooling experience.

Qualifications

• Experience discovering vulnerabilities in firmware, apps, networks, embedded Linux, drivers, protocols, or IoT devices.
• Proficiency with programming languages for vulnerability research and tooling (Python, C, C++, Rust, Go).
• Experience with fuzzing, harness development, crash triage, exploitability analysis, code review, binary analysis, or dynamic instrumentation.
• Ability to reason about memory corruption, logic flaws, auth failures, unsafe parsing, concurrency, update flows, and trust boundaries.
• Hands-on familiarity with Linux, embedded systems, networking, debugging, and common security research tooling.
• Ability to communicate vulnerability impact, reproduction steps, and mitigations clearly to research and engineering audiences.
• Demonstrated bias toward practical security outcomes over purely theoretical findings.
• Must be eligible to obtain and maintain a U.S. security clearance.
• Experience evaluating vulnerabilities across embedded protection mechanisms such as secure boot, firmware updates, key storage, memory protection, and debug controls.
• Comfort working with lab-based vulnerability validation using hardware interfaces, protocol analyzers, debuggers, or instrumented test setups.

Responsibilities

• Find novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
• Design and execute vulnerability research plans using code review, reverse engineering, fuzzing, emulation, dynamic instrumentation, hardware analysis, and adversarial testing.
• Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, and proof-of-concept tooling.
• Analyze root cause, exploitability, operational impact, and mitigations options for discovered vulnerabilities.
• Partner with reverse engineers, product security, embedded software engineers, hardware engineers, and systems teams to validate findings and drive practical remediation.
• Write clear technical reports with evidence, reproduction steps, exploitability assessment, impact, mitigations, and follow-on research opportunities.
• Design hardware-in-the-loop vulnerability experiments combining software exploitation, protocol analysis, physical interfaces, and lab instrumentation.
• Develop tooling to automate experiment orchestration, device interaction, data collection, crash triage, and vulnerability reproduction.

Skills

Vulnerability research

Embedded systems

Linux

Programming

Technical communication

Tools

Ghidra

IDA Pro

Binary Ninja

QEMU

Frida

GDB/LLDB

Job description

Anduril Industries is seeking a Vulnerability Engineer for Anduril Cyber in Costa Mesa, CA, to uncover novel vulnerabilities across hardware and software systems including embedded firmware. The role emphasizes rigorous research, reproducible artifacts, and collaboration with cross‑functional teams to drive remediation.

Ideal candidates will own vulnerability workflows from discovery through writeups, with hands-on Linux, embedded systems, and security tooling experience.