Software Engineer, Security Automation

ABOUT THE TEAM

The Lattice Foundations organization is responsible for enabling Anduril’s software products to reach a new standard of software excellence. We build tools, operate services, define processes, and develop frameworks to allow Anduril’s engineers and operators to execute at all stages of the software development lifecycle with efficiency, quality, and delight. We adapt industry best practices to the complexities of Anduril’s domain, develop new systems when we can improve on the state of the art, and integrate it all into a unitary foundation underlying Anduril’s software development.

The Security Application & Tools team within Lattice Foundations is responsible for creating and maintaining the tools and workflows that software engineering teams across Anduril need to improve software security at scale. These tools include systems to avoid, detect, manage, and propose corrections for first party and supply chain vulnerabilities across all the types of software artifacts that Anduril creates and deploys. We aim to reduce the number of vulnerabilities in Anduril's products, to improve the developer experience for security, and to decrease the time and effort required for security audits.

ABOUT THE JOB

We are looking for an experienced software engineer to join our team. In this position you will play a key role in designing, developing, and improving the software that lets Anduril tackle security at scale. You’ll work with developers to understand their needs and work with open-source projects and third party vendors to understand the current state of the art. You’ll design and build the systems that let Anduril detect, manage, and resolve all classes of software security problems across thousands of different software repositories deployed to dozens of different products. You’ll work to continually improve the scope, accuracy, and capability of these systems, improving both Anduril’s security posture and the quality of life for our developers.

If you’re passionate about creating robust large-scale software systems, improving security, and enhancing the developer experience, then this may be the position for you.

WHAT YOU’LL DO

• Design and develop production-grade security software used across Anduril’s diverse product ecosystem.


• Drive continual improvements in the quality and automation of vulnerability detection, adjudication, and remediation.


• Stay current with the latest security vulnerabilities and mitigation techniques and help create Anduril’s security automation roadmap.


• Collaborate closely with developers to understand their needs, explain vulnerabilities and potential mitigations, and review requests for exceptions.


• Operate and maintain Anduril’s security automation tools as a member of the team’s on-call rotation.


• Work with third-party vendors to evaluate and potentially integrate their security solutions.

REQUIRED QUALIFICATIONS

• 5+ years experience designing and developing production software.


• 2+ years experience in product security, application security, dev infrastructure, or a related field.


• Proficient in Golang and Python.


• Familiar with security assessment and vulnerability management tools and processes such as Trivy, Grpye, and Semgrep.


• Strong written and verbal communication skills.


• Must be eligible for and able to maintain a U.S. Secret security clearance

PREFERRED QUALIFICATIONS

• 2+ years experience working in a product or application security team.


• Experience developing cloud-based applications on AWS or Azure.


• Experience with CI/CD systems and pipelines.


• Experience designing and maintaining complex developer-facing infrastructure.

US Salary Range

$191,000 - $253,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

Healthcare Benefits

• US Roles: Comprehensive medical, dental, and vision plans at little to no cost to you.


• UK & AUS Roles: We cover full cost of medical insurance premiums for you and your dependents.


• IE Roles: We offer an annual contribution toward your private health insurance for you and your dependents.

Additional Benefits

• Income Protection : Anduril covers life and disability insurance for all employees.


• Generous time off : Highly competitive PTO plans with a holiday hiatus in December. Caregiver & Wellness Leave is available to care for family members, bond with a new baby, or address your own medical needs.


• Family Planning & Parenting Support: Coverage for fertility treatments (e.g., IVF, preservation), adoption, and gestational carriers, along with resources to support you and your partner from planning to parenting.


• Mental Health Resources: Access free mental health resources 24/7, including therapy and life coaching. Additional work-life services, such as legal and financial support, are also available.


• Professional Development: Annual reimbursement for professional development


• Commuter Benefits: Company-funded commuter benefits based on your region.


• Relocation Assistance: Available depending on role eligibility.

Retirement Savings Plan

• US Roles: Traditional 401(k), Roth, and after-tax (mega backdoor Roth) options.


• UK & IE Roles: Pension plan with employer match.


• AUS Roles: Superannuation plan.

The recruiter assigned to this role can share more information about the specific compensation and benefit details associated with this role during the hiring process.

To view Anduril's candidate data privacy policy, please visit .