Staff Software Engineer, Platform Security

The Lattice Foundations organization is responsible for enabling Anduril’s software products to reach a new standard of software excellence. We build tools, operate services, define processes, and develop frameworks to allow Anduril’s engineers and operators to execute at all stages of the software development lifecycle with efficiency, quality, and delight. We adapt industry best practices to the complexities of Anduril’s domain, develop new systems when we can improve on the state of the art, and integrate it all into a unitary foundation underlying Anduril’s software development.
The Platform Security team within Lattice Foundations is responsible for the security of the common software platform. We ensure that the platform architecture meets the security need, that the platform contains an appropriate set of well-designed security features, and that the software platform team has a strong security posture both for the development of its own components and for the management of third party dependencies. Platform Security helps other teams at Anduril securely integrate the software platform into their products.

We are looking for an experienced security engineer and builder to join our rapidly expanding team. In this role, you’ll design new security features and propose improvements to the security of Anduril’s common software platform. You will lead the implementation of these designs, working across the stack to deliver production-quality code that meets the challenging requirements of our customers.
Collaboration is key; you’ll review designs from other teams to identify potential security problems and work closely with them to agree on effective solutions. You’ll also collaborate closely with teams across the company to improve Anduril’s security posture.
If you’re passionate about building things that improve security and if you enjoy both the breadth that comes from working on large systems and the technical depth that is needed to create secure foundations, then this may be the position for you.

• Lead the design of new security features and of security improvements to common platform services. Our scope is broad, with example domains ranging from operating system hardening, through authentication, to distributed protocols
• Implement your designs, balancing security, performance, and functional requirements. You may need to work at all levels of the stack, from integrating secure hardware to developing and deploying applications
• Review design proposals from other teams, identifying potential security issues and proposing solutions
• Perform threat modeling and analyze existing systems to identify vulnerabilities
• Provide security advice to engineering teams during their development, helping raise security awareness
• Collaborate closely with other security practitioners and the software platform team, supporting efforts to improve Anduril’s security posture while delivering on our commitments to customers

• 6+ years experience designing and developing software
• Experience designing secure protocols and/or APIs
• Proficient in at least one of the following: C++, Rust, Golang
• 5+ years experience securing complex systems
• Strong working knowledge of cryptographic primitives and best practices, including key management and certificates
• Experience performing security reviews and threat modeling
• Strong written and verbal communication skills; proven ability to negotiate and reach consensus
• Must be a U.S. Person due to required access to U.S. export controlled information or facilities

• Proficient in two or more of the following: C++, Rust, Golang
• Experience integrating secure hardware, such as TPM or TEE
• Strong working knowledge of operating system security
• Experience securing Kubernetes deployments