Staff Threat and Attack Research Engineer

Anduril Industries is a defense technology company dedicated to transforming U.S. and allied military capabilities through advanced technology. By integrating cutting-edge expertise and business models from the most innovative 21st-century companies, Anduril is revolutionizing how military systems are designed, built, and deployed. Anduril’s systems leverage Lattice OS, an AI-powered operating system that consolidates thousands of data streams into a real-time, 3D command and control center. As strategic competition intensifies, Anduril is committed to delivering cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

ABOUT THE TEAM

We are seeking a Staff Threat and Attack Research Engineer to join our Security organization. The ideal candidate will combine threat intelligence knowledge with strong engineering skills to develop and implement advanced threat actor tracking and analysis systems to protect Anduril products and infrastructure.

WHAT YOU’LL DO

• Monitor and analyze sophisticated cyber threats targeting Anduril’s products, infrastructure, and personnel.
• Research, mitigate, and anticipate emerging technical trends in the threat landscape.
• Collaborate closely with the detection and response team to provide timely and actionable intelligence to support ongoing investigations.
• Engage cross-functionally with the offensive security team on product and infrastructure red team engagements.
• Enhance tooling for threat actor tracking and intelligence data integration.
• Foster proactive collaboration and information exchange with external partners to build joint capabilities and achieve shared objectives.

REQUIRED QUALIFICATIONS

• Proven experience analyzing complex threat actor campaigns, including supply chain and infrastructure, with the ability to develop long-term countermeasures.
• Proficiency in one or more programming languages (e.g., Python, Rust, Golang, Swift).
• Capacity to prioritize and execute tasks independently with minimal supervision.
• Strong and professional communication skills (written and verbal).
• Ability to obtain and hold a U.S. Secret security clearance.

PREFERRED QUALIFICATIONS

• In-depth knowledge of nation-state, sophisticated criminal, or supply chain threats.
• Experience creating file-based or network-based rules and signatures (e.g., YARA, Snort) for detection and tracking complex threats.
• Track record of writing production code for threat intelligence tools.
• Expertise in large-scale data analysis.
• Established connection within the broader security and threat intel community.
• Strong analytical and problem-solving capabilities.
• Demonstrated ability to work effectively in team environments.
• Experience with Vertex Synapse.