Principal Software Engineer, Platform Security

Anduril Anduril · Defense · Costa Mesa, CA · Software : Software Platform

Principal Software Engineer, Platform Security at Anduril, a defense technology company. This role focuses on designing and leading security systems, cryptographic infrastructure, and hardware root-of-trust architectures for autonomous and robotic platforms. The position requires deep expertise in systems security and cryptography, with a track record of driving security strategy and architectural decisions across an organization.

What you'd actually do

  1. Own the technical vision and architecture for platform security across Anduril's product ecosystem
  2. Design cryptographic systems, protocols, and key management architectures for autonomous and robotic platforms operating in contested and disconnected environments
  3. Lead the design of hardware root-of-trust architectures integrating TPMs, TEEs, HSMs, and secure boot across diverse embedded platforms
  4. Drive the strategy for promoting business-line security implementations into shared, composable platform services
  5. Serve as the senior technical authority for security architecture reviews across the organization, providing definitive guidance on cryptographic design, protocol security, and system hardening

Skills

Required

  • 12+ years of experience in software engineering
  • significant depth in systems security and cryptography
  • Expert-level knowledge of cryptographic protocol design
  • key management architectures
  • certificate systems
  • cryptographic agility
  • Deep experience with hardware security: TPM, TEE, HSM, secure boot, and hardware root-of-trust design
  • C++
  • Rust
  • Go
  • Experience designing security architectures for embedded, real-time, or robotic systems
  • Track record of leading cross-organizational technical initiatives
  • driving architectural decisions that span multiple teams
  • Strong ability to communicate complex security concepts
  • Experience performing and leading threat modeling
  • security architecture reviews
  • cryptographic design reviews
  • Eligible to obtain and maintain active U.S. Secret security clearance

Nice to have

  • post-quantum cryptography
  • distributed key generation (DKG)
  • threshold cryptographic schemes
  • defense, aerospace, or autonomous systems
  • FIPS 140
  • Common Criteria
  • NSA CSfC requirements
  • secure communication protocols for autonomous platforms or mesh networks
  • Linux kernel security
  • mandatory access controls (SELinux/AppArmor)
  • OS hardening at scale
  • building and evolving platform security services
  • compliance frameworks (STIGs, NIST 800-53, CMMC)
  • Nix build systems
  • reproducible build pipelines for security-critical software

What the JD emphasized

  • security systems at the intersection of hardware, firmware, and software
  • complex technical decisions with lasting consequences
  • deep expertise in cryptography, systems security, and secure architecture
  • drive security strategy
  • own the design of Anduril's most critical security systems
  • set the technical direction that shapes how security is built into every product