Lead Security Engineer, GRC

Anduril
Boston, Seattle, Washington
Workplace: OnsiteFull timeUSD 166,000 - 253,000 annuallyFunction: CybersecurityExperience: 6+ yearsSkills: ["Technical direction","Mentoring engineers","Ownership","Autonomy","Cross-team alignment"]

Build and lead the engineering foundation of the GRC program by creating pipelines and tooling that collect compliance evidence from systems, map it to normalized controls, and maintain a system of record for control mappings and artifacts. Translate CMMC, NIST 800-171/800-53, and FedRAMP/IL5 into automatable technical checks with clear pass/fail signals. Surface control drift with remediation paths while mentoring and directing a growing engineering team.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Anduril
Anduril
2 days ago

Lead Security Engineer, GRC

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Build and lead the engineering foundation of the GRC program by creating pipelines and tooling that collect compliance evidence from systems, map it to normalized controls, and maintain a system of record for control mappings and artifacts. Translate CMMC, NIST 800-171/800-53, and FedRAMP/IL5 into automatable technical checks with clear pass/fail signals. Surface control drift with remediation paths while mentoring and directing a growing engineering team.
Location: Boston, Seattle, Washington
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Build the evidence-collection pipeline and map evidence to a normalized control model.
  • •Create reusable collectors and schemas as reference architectures for new controls.
  • •Stand up and operate the system of record for controls, mappings, and evidence; drive build-vs-buy decisions.
  • •Detect control drift and route findings to system owners with remediation and risk-acceptance paths.
  • •Translate CMMC, NIST 800-171, 800-53, and FedRAMP/IL5 into automatable technical checks with pass/fail signals, and mentor a growing engineering team.

Pay and Benefits

Salary: USD 166,000 - 253,000 annually
Equity and Bonus:Equity

Key Requirements

  • •6+ years in security engineering, GRC, or related roles, including hands-on automation or data pipeline development.
  • •Strong programming ability in a general-purpose language (Go, Python, Rust, etc.).
  • •Hands-on experience operationalizing compliance frameworks including CMMC, NIST 800-171, 800-53, and FedRAMP.
  • •Experience designing data collection and integration across cloud/SaaS systems using APIs, log/event pipelines, and data lakes.
  • •Eligible to obtain and maintain a U.S. Secret clearance.
Experience:6+ yearsDefense technologySecurity engineeringGRCCloudSaaS
Skills:Technical directionMentoring engineersOwnershipAutonomyCross-team alignment
Tech Stack:GoPythonRustTerraformAWS CDKAPIsLog/event pipelinesData lakesSystem of recordBuild-vs-buy analysis

Eligibility

Security Clearance:U.S. Secret

Company Brief

Anduril
Designs and builds advanced defense systems combining autonomous aircraft, sensors, and AI-driven software for military and national security applications, focused on modernizing battlefield capabilities and distributed sensing.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: Costa Mesa, United States
Founded: 2017
WebsiteLinkedIn