Senior Software Engineer (Android VMs)

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology.

We're looking for a Senior Software Engineer to design, implement, and harden Android VMs running on crosvm and contribute to our platform security work.

Responsibilities

• Design, build, and maintain Android VMs running on crosvm, including VMM configuration, device models (virtio), and guest/host integration
• Bring up and boot Android guest images inside a VM: kernel, bootloader, init, and Android framework layers
• Harden the virtualization boundary: reduce attack surface, sandbox device backends, and reason about guest-to-host and host-to-guest threat models
• Implement and validate secure boot and chain-of-trust for the VM (measured/verified boot, key management, rollback protection)
• Analyze and mitigate Android VM security issues; contribute to threat modeling, security reviews, and vulnerability remediation
• Debug across the stack , hypervisor/VMM, guest kernel, and Android userspace , using the appropriate tooling for each layer
• Collaborate with platform, kernel, and security teams to isolate and resolve issues that span hardware, firmware, and software
• Document architecture, security properties, trust boundaries, and design decisions

Required Qualifications

• Strong systems programming in C/C++ and Rust, including low-level work with memory safety, concurrency, and performance under real constraints
• Hands-on experience with crosvm (or a comparable VMM such as QEMU/rust-vmm/Firecracker): device models, virtio, VM lifecycle, and VMM configuration
• Solid understanding of virtualization and hardware-assisted virtualization (KVM, guest/host memory management, vCPUs, MMIO/IOMMU, virtio transport)
• Android VM security knowledge: guest/host isolation, sandboxing of VMM/device backends, and the guest-to-host attack surface
• Android platform security fundamentals: SELinux/sandboxing, verified boot (AVB/dm-verity), keystore/KeyMint, and the Android trust model
• Secure boot and chain-of-trust: measured vs. verified boot, signing and key management, rollback protection, and root-of-trust concepts
• Comfortable working from specifications, kernel/driver source, and register-level documentation
• Ability to debug low-level systems issues (kernel logs, ftrace/perf, gdb, VMM tracing/logging) across host and guest
• Git proficiency
• Eligibility: Must be eligible to obtain and maintain a U.S. Security Clearance

Preferred Qualifications

• Experience with Android Virtualization Framework (AVF), pVM/protected VMs, or microdroid
• Guest and host Linux kernel development: drivers, virtio backends/frontends, and kernel debugging
• TEE / TrustZone experience and integration with a hardware root of trust
• Bootloader work in the Android ecosystem (U-Boot, ABL, or equivalent) and secure boot bring-up
• Cryptographic key provisioning, attestation, and lifecycle management for VMs and devices
• Familiarity with fuzzing, sandboxing frameworks (seccomp/minijail), and hardening techniques for VMMs
• CI for systems/kernel builds and automated VM image testing

Benefits

Anduril offers top-tier benefits for full-time employees, including comprehensive, competitive benefits packages.