Senior Offensive Security Engineer

Offensive security engineer in Washington, DC, joining Anduril's Product Security organisation to expand its red team capability. The job is to probe Anduril's own software, firmware and hardware, and the third-party parts built into its products, for weaknesses; to brief engineering teams on the attacks that matter and work with them on testing fixes; and to build and maintain the tools and infrastructure red team projects depend on.

The ideal candidate came to offensive security from software or systems engineering, has led engagements, and can assess anything from web applications and cloud or container platforms to embedded systems and mobile devices. Programming in a language such as Rust, C/C++, Go or Swift is expected; weaponising vulnerabilities and mobile exploitation are pluses. Candidates must be eligible for a Secret clearance.