Vulnerability Engineer - Firmware & Hardware Security

Anduril Industries; Washington (District of Columbia); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril Industries is hiring a Vulnerability Engineer for the Anduril Cyber team to discover novel vulnerabilities across firmware, software, and hardware boundaries. You will design research plans, perform code reviews, fuzzing, emulation, and tooling to turn findings into reproducible artifacts.

You will collaborate with hardware, embedded software, and systems teams to validate findings and craft mitigations. Eligible candidates must obtain a U.S.

Qualifications

• Experience discovering vulnerabilities in firmware, applications, embedded systems, drivers, or hardware-adjacent areas.
• Proficiency with Python, C, C++, Rust, or Go.
• Experience with fuzzing, harness development, crash triage, or dynamic instrumentation.
• Ability to reason about memory corruption, auth failures, and trust boundaries.
• Hands-on with Linux, embedded systems, networking, debugging, and security tooling.
• Eligible to obtain a U.S. security clearance.
• Experience evaluating vulnerabilities in secure boot, firmware updates, key storage, memory protection, and debug interfaces.
• Comfort with lab validation using hardware interfaces and analyzers.

Responsibilities

• Find novel vulnerabilities in software, firmware, embedded systems, protocols, update paths, device interfaces, and hardware/software integration boundaries.
• Design and execute vulnerability research plans that combine code review, reverse engineering, fuzzing, emulation, and instrumentation.
• Build custom fuzzers, harnesses, emulators, instrumentation, triage workflows, and proof-of-concept tooling to reproduce findings.
• Analyze root cause, exploitability, impact, and mitigations for discovered vulnerabilities.
• Partner with cross-functional engineers to validate findings and drive remediation.
• Write clear technical reports with evidence, reproduction steps, and mitigations.
• Design hardware-in-the-loop vulnerability experiments combining software exploitation and lab instrumentation.
• Develop tooling to automate experiment orchestration and data collection.

Skills

Vulnerability research

Firmware analysis

C/C++

Python

Reverse engineering

Fuzzing

Linux/embedded

Debugging

Documentation

Security tooling

Tools

Ghidra

IDA Pro

Binary Ninja

QEMU

Frida

GDB/LDB

Job description

Anduril Industries is hiring a Vulnerability Engineer for the Anduril Cyber team to discover novel vulnerabilities across firmware, software, and hardware boundaries. You will design research plans, perform code reviews, fuzzing, emulation, and tooling to turn findings into reproducible artifacts.

You will collaborate with hardware, embedded software, and systems teams to validate findings and craft mitigations. Eligible candidates must obtain a U.S.