Senior Software Engineer, Security Automation

The Lattice Foundations organization is responsible for enabling Anduril’s software products to reach a new standard of software excellence. We build tools, operate services, define processes, and develop frameworks to allow Anduril’s engineers and operators to execute at all stages of the software development lifecycle with efficiency, quality, and delight. We adapt industry best practices to the complexities of Anduril’s domain, develop new systems when we can improve on the state of the art, and integrate it all into a unitary foundation underlying Anduril’s software development.
The Security Application & Tools team within Lattice Foundations is responsible for creating and maintaining the tools and workflows that software engineering teams across Anduril need to improve software security at scale. These tools include systems to avoid, detect, manage, and propose corrections for first party and supply chain vulnerabilities across all the types of software artifacts that Anduril creates and deploys. We aim to reduce the number of vulnerabilities in Anduril's products, to improve the developer experience for security, and to decrease the time and effort required for security audits.

We are looking for an experienced software engineer to join our team. In this position you will play a key role in designing, developing, and improving the software that lets Anduril tackle security at scale. You’ll work with developers to understand their needs and work with open-source projects and third party vendors to understand the current state of the art. You’ll design and build the systems that let Anduril detect, manage, and resolve all classes of software security problems across thousands of different software repositories deployed to dozens of different products. You’ll work to continually improve the scope, accuracy, and capability of these systems, improving both Anduril’s security posture and the quality of life for our developers.
If you’re passionate about creating robust large-scale software systems, improving security, and enhancing the developer experience, then this may be the position for you.

• Design and develop production-grade security software used across Anduril’s diverse product ecosystem.
• Drive continual improvements in the quality and automation of vulnerability detection, adjudication, and remediation.
• Stay current with the latest security vulnerabilities and mitigation techniques and help create Anduril’s security automation roadmap.
• Collaborate closely with developers to understand their needs, explain vulnerabilities and potential mitigations, and review requests for exceptions.
• Operate and maintain Anduril’s security automation tools as a member of the team’s on-call rotation.
• Work with third-party vendors to evaluate and potentially integrate their security solutions.

• 5+ years experience designing and developing production software.
• Proficient in Golang and Python.
• Familiar with security assessment and vulnerability management tools and processes such as Trivy, Grpye, and Semgrep.
• Strong written and verbal communication skills.
• Must be eligible for and able to maintain a U.S. Secret security clearance

• 2+ years experience working in a product or application security team.
• Experience developing cloud-based applications on AWS or Azure.
• Experience with CI/CD systems and pipelines.
• Experience designing and maintaining complex developer-facing infrastructure.