Lead Security Engineer, GRC
Core
Build the engineering core of the GRC program, creating automated pipelines and tooling to generate continuous, defensible evidence of compliance for Anduril's defense systems.
Role type
Senior IC security engineering lead (GRC automation)
Builds
Automated evidence collection pipelines, control mapping schemas, and systems of record for compliance frameworks.
Domain
Defense technology / Cybersecurity compliance
Deliverable
production ML models | infrastructure
Required skills
Security engineering, GRC automation, data pipeline construction, compliance framework operationalization, cloud data integration, infrastructure as code, technical leadership
Preferred skills
Continuous control monitoring platforms, security data lakes, STIG/ConMon scanning, Kubernetes hardening
Technologies
Go, Python, Rust, Terraform, AWS CDK, CMMC, NIST 800-171, FedRAMP, SOC 2
Responsibilities
Build evidence collection pipelines mapping to normalized control models, construct reusable collectors and schemas, stand up systems of record for controls and evidence, surface control drift and route findings, translate compliance frameworks into automatable technical checks, set technical direction and mentor engineers
Seniority
Senior, hands-on IC with team leadership
