Systems Safety Engineer, Command & Control (C2)

Anduril Industries, Inc.; Broomfield (CO); On-site; USD 126,000 - 167,000; Full time

Job summary

Anduril Industries, Inc. in Colorado is seeking a Systems Safety Engineer to join our Battlespace Awareness C2 team in Broomfield.

You will own end-to-end safety for our AI-enabled, software-defined command and control systems across sensors, effectors, and autonomous platforms, ensuring safety is built in from the start. This role centers on hazard analyses, safety requirements decomposition, and compliance with DoD standards such as MIL-STD-882E, with artifacts and verification plans prepared

Qualifications

• 5+ years in systems safety, safety-critical software, or safety engineering.
• MIL-STD-882 (preferably 882E) experience across a defense program lifecycle.
• Hands-on experience with FTA and two of FHA, FMEA/FMECA, PHA, SSA, CCA.
• Requirements engineering: decomposition, traceability, verification/validation.
• Experience validating safety and performance via analysis, simulation, HITL/SITL, field testing.
• Familiarity with government/customer requirements processes and DoD safety reviews.
• Proficiency with Python (and/or MATLAB) for data parsing, modeling, and visualization.
• Cross-functional collaboration and clear communication.
• US work authorization; up to 25% travel.

Responsibilities

• Own systems safety end-to-end for C2 software and interfaces.
• Lead safety requirements gathering, decomposition, and traceability across teams.
• Validate that systems are safe via performance-characterization campaigns.
• Apply MIL-STD-882E and adjacent safety standards.
• Conduct and document FHA, FTA, FMEA/FMECA, PHA, SSA, and CCA analyses.
• Characterize software-driven safety performance and mitigation strategies.
• Ensure compliance with government requirements and certify artifacts.
• Develop test plans, acceptance criteria, and analysis tools.
• Integrate safety into the development lifecycle with engineers and product teams.
• Develop modeling/simulation frameworks for safety validation.

Skills

Systems safety

MIL-STD-882E

FTA

Requirements engineering

Python

Education

Bachelor's degree in Engineering, Physics, Computer Science or Mathematics

Tools

Python

MATLAB

Linux OS

Job description

Systems Safety Engineer, Command & Control (C2)

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

About the Team

At Anduril, our Battlespace Awareness Command and Control Software team specializes in solving complex, real-world problems through cutting-edge algorithms and intelligent software integrations. Operating in small, innovative teams, we push the boundaries of what's possible to deliver advanced technologies with mission-critical applications. Our commitment doesn't end with academic research or proof-of-concept experiments; we measure our success by the real-world impact of our deployed solutions. Inspired by Arthur C. Clarke's vision — "Any sufficiently advanced technology is indistinguishable from magic" — we aim to achieve groundbreaking results in path planning, route optimization, and autonomous mission execution at the command and control layer

As C2 capabilities move from prototype to fielded, safety-critical operational systems supporting the Army, Navy, Air Force, and Missile Defense Agencies, we need a Systems Safety Engineer who can ensure our software-defined, AI-enabled decision-making systems are demonstrably safe, rigorously validated, and defensible to our government customers.

About the Job

We are looking to hire a Systems Safety Engineer to join our rapidly growing team in Broomfield, CO. The Battlespace Awareness team develops tactical sense- and decision-making software that provides advanced capabilities for Anduril's command and control (C2) products. This software must work with various combinations of compute hardware, connected sensor/effector hardware, and supporting software services. It must be effective, robust, and safe across various configurations, mission sets, and customer experiences.

Because our C2 products issue tasking to kinetic and non-kinetic effectors, integrate with autonomous platforms, and operate in human-on-the-loop and human-in-the-loop decision cycles, safety is a first-class engineering discipline, not a downstream compliance check. We need a Systems Safety Engineer who can own end-to-end safety assurance: from requirements decomposition and hazard analysis through software performance characterization, validation against government standards, and evidence packages that hold up under customer, regulatory, and legal scrutiny.

What You'll Do

• Own systems safety end-to-end for C2 software and its interfaces to sensors, effectors, and autonomous platforms — identify and solve problems between the seams and push through to reach desired outcomes
• Lead safety requirements gathering, decomposition, and traceability across cross-functional teams, translating mission-, system-, and government-level requirements into subsystem-level functional, performance, and safety specifications. Define success in the face of ambiguity
• Validate that our systems are safe — architect and execute performance-characterization campaigns for safety-critical software behaviors (classification, sensor/effector management, threat forecasting, autonomous tasking) using both simulated data and field-testing data
• Apply industry and government safety standards rigorously — including MIL-STD-882E (DoD System Safety) and adjacent frameworks, where relevant.
• Conduct and document safety analyses: Functional Hazard Analysis (FHA), Fault Tree Analysis (FTA), Failure Modes & Effects Analysis (FMEA/FMECA), Preliminary Hazard Analysis (PHA), System Safety Assessment (SSA), and Common Cause Analysis (CCA).
• Characterize software-driven performance for safety — quantify false-track rates, misclassification consequences, latency-under-load, degraded-mode behavior, and human-machine teaming failure modes; translate results into risk assessments and mitigation strategies that protect the warfighter and limit liability exposure to Anduril.
• Validate compliance with government requirements — partner with program offices (Army, MDA, Air Force, Navy) to establish means of compliance, author certification and verification artifacts, and represent Anduril at safety review boards and design reviews (SRR, PDR, CDR, TRR).
• Develop test plans, acceptance criteria, and analysis tools to evaluate system safety and performance; use data-driven analysis to verify customer safety requirements are met, and create artifacts to trace safety performance as the system evolves
• Integrate safety up front into the development lifecycle — not as a side group, but as a discipline embedded with algorithm engineers, software engineers, and product teams; build lightweight, high-velocity safety processes that match Anduril's product cadence without compromising rigor.
• Develop and implement modeling and simulation frameworks to validate safety-critical algorithmic performance, test system behavior under nominal and adversarial scenarios, and provide data-driven insights for continuous safety improvement

Required Qualifications

• 5+ years of systems safety, systems engineering, or safety-critical software engineering experience. Degree in Engineering, Physics, Computer Science, Mathematics, or a related field
• Demonstrated application of MIL-STD-882 (preferably 882E) across a defense program lifecycle — including hazard tracking, risk assessment codes, and closure of safety-significant items.
• Hands-on experience performing Fault Tree Analysis (FTA) and at least two of: FHA, FMEA/FMECA, PHA, SSA, CCA — with artifacts you can walk us through.
• Requirements engineering fluency — decomposition, traceability, and verification/validation. Comfortable translating vague customer intent into testable safety requirements
• Experience validating that safety and performance requirements are actually met — through analysis, simulation, HITL/SITL, and field testing
• Familiarity with government/customer requirements processes and ability to engage credibly with DoD program offices, safety review boards, and regulatory authorities on means of compliance and certification basis
• Proficiency with Python (and/or MATLAB) for data parsing, modeling & simulation, data analysis, and visualization of safety and performance evidence
• Demonstrated experience collaborating across cross-functional teams and communicating complex technical findings clearly to developers, system leads, and customers
• Comfortable working with ambiguity, evolving priorities, and challenging problems
• Must be authorized to work in the United States
• Up to 25% travel to customer sites and test events

Preferred Qualifications

• Experience applying MIL-STD-882 to software-intensive or AI/ML-enabled systems (software safety, autonomy assurance, algorithmic risk)
• Prior systems safety work on C2, battle management, air & missile defense, counter-UAS, or autonomous systems programs
• Familiarity with MBSE using e.g. AFSIM, and confident applying Monte Carlo analysis
• Familiarity with Linux OS and comfort obtaining data from software platforms using command-line tools
• Familiarity with processes and constraints for real-time and safety-critical software
• Working knowledge of C/C++ or Rust — coding full-time is not required, but understanding is valuable; our C2 stack uses Rust, C++, Python, etc.
• Understanding of the full software development lifecycle, CI/CD, and modern software safety practice (safety cases, assurance arguments, GSN)
• Previous experience in a defense, aerospace, or naval environment
• Experience with any of the following: radar, tracking systems, sensor fusion, distributed systems, autonomous systems, ML/AI systems

We request transcripts as part of the early application process to understand your academic background and how your coursework supports the skills deemed critical for the role. Transcripts help us assess your technical and analytical abilities, complementing our interview process in which we also evaluate practical experience and cultural fit. If you choose not to share your transcripts, you will need to provide detailed information regarding your academic performance in relevant courses, including projects and coursework specifics, to ensure we evaluate your academic accomplishments properly. If you do provide academic transcripts, feel free to redact non-technical information (e.g., student ID, dates, non-technical coursework, etc.). Unofficial transcripts obtained online acceptable for this assessment.

US Salary Range

$126,000 - $167,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits .

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Anduril Industries’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.