Anduril's Security Engineering team is looking for a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program.

You'll set technical direction for the function and grow the team building it.

Responsibilities:

  • Build the pipeline that collects evidence from Anduril's systems and maps it to a normalized control model
  • Construct reusable collectors and schemas as reference architectures so each new control is assembly, not reinvention
  • Stand up the system of record for controls, mappings, and evidence, and drive the build-vs-buy analysis
  • Surface control drift and route findings to system owners with clear remediation and risk-acceptance paths
  • Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable technical checks and pass/fail signals
  • Set technical direction and mentor a growing engineering team

Required Qualifications:

  • 6+ years in security engineering, GRC, or a related role, including hands-on building of automation or data pipelines
  • Strong programming ability in a general-purpose language (Go, Python, Rust, etc.)
  • Hands-on experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2)
  • Experience designing data collection and integration across cloud and SaaS systems (APIs, log/event pipelines, data lakes)
  • Experience with infrastructure as code (e.g., Terraform, AWS CDK) in a production capacity
  • Track record of setting technical direction and mentoring engineers
  • Ability to work autonomously, take ownership of ambiguous problems, and drive alignment across partner teams
  • Eligible to obtain and maintain a U.S. Secret clearance

Preferred Qualifications:

  • Experience with continuous control monitoring or GRC platforms (Vanta, Drata, Hyperproof, OneTrust), or building bespoke equivalents
  • Experience with security data lakes, log aggregation, or building data marts for querying
  • Familiarity with STIG/ConMon scanning, CSPM, or Kubernetes hardening
  • Experience in fast-paced, high-growth defense technology environments

Benefits: Anduril offers top-tier benefits for full-time employees, including a comprehensive, competitive benefits package (available at little to no cost to employees) that ensures you're supported in health, recovery, and whatever comes next.