# Lead Security Engineer, GRC

**Company**: Anduril
**Location**: Washington, District of Columbia
**Experience**: senior
**Job type**: full-time
**Salary**: $166,000-$253,000 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/andurilindustries/jobs/5222657007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9b8abe4d-9ff

## Description

Anduril's Security Engineering team is looking for a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program.

You'll set technical direction for the function and grow the team building it.

Responsibilities:

- Build the pipeline that collects evidence from Anduril's systems and maps it to a normalized control model

- Construct reusable collectors and schemas as reference architectures so each new control is assembly, not reinvention

- Stand up the system of record for controls, mappings, and evidence, and drive the build-vs-buy analysis

- Surface control drift and route findings to system owners with clear remediation and risk-acceptance paths

- Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable technical checks and pass/fail signals

- Set technical direction and mentor a growing engineering team

Required Qualifications:

- 6+ years in security engineering, GRC, or a related role, including hands-on building of automation or data pipelines

- Strong programming ability in a general-purpose language (Go, Python, Rust, etc.)

- Hands-on experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2)

- Experience designing data collection and integration across cloud and SaaS systems (APIs, log/event pipelines, data lakes)

- Experience with infrastructure as code (e.g., Terraform, AWS CDK) in a production capacity

- Track record of setting technical direction and mentoring engineers

- Ability to work autonomously, take ownership of ambiguous problems, and drive alignment across partner teams

- Eligible to obtain and maintain a U.S. Secret clearance

Preferred Qualifications:

- Experience with continuous control monitoring or GRC platforms (Vanta, Drata, Hyperproof, OneTrust), or building bespoke equivalents

- Experience with security data lakes, log aggregation, or building data marts for querying

- Familiarity with STIG/ConMon scanning, CSPM, or Kubernetes hardening

- Experience in fast-paced, high-growth defense technology environments

Benefits: Anduril offers top-tier benefits for full-time employees, including a comprehensive, competitive benefits package (available at little to no cost to employees) that ensures you're supported in health, recovery, and whatever comes next.

## Skills

### Required
- security engineering
- GRC
- automation
- data pipelines
- programming
- compliance frameworks
- infrastructure as code

### Nice to have
- continuous control monitoring
- GRC platforms
- security data lakes
- log aggregation
- STIG/ConMon scanning
- CSPM
- Kubernetes hardening

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/andurilindustries/jobs/5222657007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)