Lead Security Engineer, GRC

Anduril
Boston, Seattle, Washington
Workplace: OnsiteFull timeUSD 166,000 - 253,000Function: CybersecuritySkills: ["Technical direction","Mentoring","Autonomy","Ownership","Cross-team alignment"]

Build the engineering core of a GRC program by creating pipelines and tooling that collect compliance evidence from Anduril systems and map it to normalized controls. Design reusable collectors and a system of record for controls, mappings, and evidence, and automate technical checks for CMMC, NIST, and FedRAMP frameworks. Surface control drift and route findings for remediation while translating security and compliance requirements into production-grade data and infrastructure.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Anduril
Anduril
2 days ago

Lead Security Engineer, GRC

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Build the engineering core of a GRC program by creating pipelines and tooling that collect compliance evidence from Anduril systems and map it to normalized controls. Design reusable collectors and a system of record for controls, mappings, and evidence, and automate technical checks for CMMC, NIST, and FedRAMP frameworks. Surface control drift and route findings for remediation while translating security and compliance requirements into production-grade data and infrastructure.
Location: Boston, Seattle, Washington
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Build a pipeline that collects evidence from systems and maps it to a normalized control model.
  • •Create reusable collectors and schemas as reference architectures so new controls are assembled, not reinvented.
  • •Stand up and operate a system of record for controls, mappings, and evidence, including build-vs-buy analysis.
  • •Surface control drift and route findings to system owners with remediation and risk-acceptance paths.
  • •Translate CMMC, NIST 800-171, and FedRAMP/IL5 into automatable technical checks and pass/fail signals while setting technical direction and mentoring the team.

Pay and Benefits

Salary: USD 166,000 - 253,000

Key Requirements

  • •6+ years in security engineering, GRC, or a related role, including hands-on building of automation or data pipelines.
  • •Strong programming ability in a general-purpose language (Go, Python, Rust, etc.).
  • •Hands-on operational experience with compliance frameworks including CMMC, NIST 800-171/800-53, FedRAMP, and SOC 2.
  • •Experience designing data collection and integration across cloud/SaaS systems (APIs, log/event pipelines, data lakes).
  • •Experience with infrastructure as code (e.g., Terraform, AWS CDK) in production, plus a track record of technical direction and mentoring engineers.
Experience:Defense technologySecurity engineeringGRCComplianceContinuous control monitoring
Skills:Technical directionMentoringAutonomyOwnershipCross-team alignment
Tech Stack:GoPythonRustTerraformAWS CDKAPIsLog/event pipelinesData lakesData martsCMMCNIST 800-171NIST 800-53FedRAMPSOC 2STIGConMonCSPMKubernetes

Eligibility

Security Clearance:Secret

Company Brief

Anduril
Designs and builds advanced defense systems combining autonomous aircraft, sensors, and AI-driven software for military and national security applications, focused on modernizing battlefield capabilities and distributed sensing.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: Costa Mesa, United States
Founded: 2017
WebsiteLinkedIn