Systems Security Engineer, Programs

ABOUT THE TEAM

At Anduril we are developing cutting-edge artificial intelligence systems, command and control platforms, and autonomous systems across air, land, maritime, and space domains. We are looking for Senior Systems Security Engineers to lead a mission-focused, threat-informed approach to product security for the next generation of Anduril’s products. In order to be successful at Anduril, a Senior Systems Security Engineer needs to be fluent in areas of technical leadership, requirements analysis, design rigor, and have a hands-on contributor mindset.

This role will drive system security engineering principles into design and integration with other systems internal and external to Anduril. In short, this individual will own the execution of all security aspects of product development, production, and sustainment through the entire product lifecycle to ensure product resiliency in cyber-contested environments.

• Integrate holistic Systems Security Engineering processes to prevent, mitigate, and recover from cyberattacks that employ advanced adversary Tactics, Techniques, and Procedures (TTPs)
• Champion system security architecture development and requirements derivation, decomposition, and flow down for Anduril products with varying levels of system design maturity
• Design system and solution features with engineering teams to meet and exceed industry-standard security goals
• Identify and prioritize mission-based cyber risks, translating complex threat landscapes into actionable engineering decisions
• Develop, document, orchestrate, and execute system security tests, demonstrations, evaluations, and assessments (including support for customer-led events)
• Develop, guide, and monitor technical documentation to capture trade studies, system designs, analyses, and results related to a system’s security posture
• Support technical work products developed by the larger engineering team and support major milestone deliveries (e.g. SRR, SVR, PDR, CDR, TRR, PRR)

• Experience in one or more of the following fields:
  Systems Security Engineering, Cybersecurity, Electrical Engineering, Software Engineering, Computer Engineering, Computer Science
• Fluency in modern USG cyber methodologies, including Cyber Survivability guidance and related policy (JSIG, ICD 503 CSEIG, SSECG, NIST SP 800-160, Cyber T&E Guidebook, CMMC, etc.)
• Direct experience developing cyber documentation (e.g., Cybersecurity Strategy, Cyber Survivability Endorsement artifacts, RMF assessment and authorization artifacts, etc.)
• Previous work on security engineering and architecture for defense / national security systems and/or complex embedded commercial systems
• Strong understanding of the “why” behind the product, systems, and security design
• Ability to effectively brief and interact regularly with a technically oriented government customer
• A sincere commitment to a positive, inclusive, and collaborative culture
• Excellent verbal and written communication skills
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance

• Excels at the above listed Requirements
• Proven track record of excelling across the broader Systems Security Engineering domain, encompassing embedded Systems Engineering, Cybersecurity, Cyber Resiliency, Software Security, and Anti-Tamper Engineering
• Experience creating and integrating with system design documentation in No Magic CAMEO
• Experience integrating with Software Assurance, Supply Chain Risk Management, Configuration Management, and System Test
• Experience executing the Anti-Tamper process and authoring associated documentation
• Experience with security testing on DoD systems (e.g. penetration testing, red teaming, vulnerability assessments)
• Experience working with unmanned aircraft Group 3 class and above
• Experience working with various operating systems and communication protocols

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business…