Lead Security Engineer, GRC

Anduril Industries

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Boston, MA
Salary: $166,000–$253,000 / yr
Posted: 16 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $182k

This role $210k

$118k most similar roles pay here $268k

This role pays more than 76% of similar roles. Most pay $155,750–$208,975 — the shaded band above. At the midpoint, this role pays about $210k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Anduril Industries

Anduril Industries is a defense technology company that builds advanced hardware and software systems for national security, including autonomous drones, surveillance systems, and the Lattice AI command platform.

Anduril Industries currently has 1697 open roles on FindRole.

Listed pay typically runs $146,000–$194,000 across 1504 roles with salary data.

Most-posted roles

View all roles at Anduril Industries

At a glance

TL;DR · Lead Security Engineer, GRC

Role Posting Log in to save

Lead Security Engineer, GRC joins the Security Engineering team to build the engineering core of the GRC program. This role involves developing pipelines that collect system evidence and map it to a normalized control model while constructing reusable collectors and schemas as reference architectures. The engineer will establish systems of record for controls and mappings, perform build-versus-buy analyses, and translate frameworks like CMMC, NIST 800-171, FedRAMP/IL5 into automatable technical checks. Key responsibilities include identifying control drift and mentoring a growing engineering team. Required skills include proficiency in general-purpose languages such as Go, Python, or Rust, along with experience in infrastructure as code using Terraform or AWS CDK. The role focuses on automating compliance evidence for defense technology systems by integrating data across cloud and SaaS environments through APIs and log pipelines.

Skills

Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes

What you'll do

Build pipelines that collect system evidence and map it to a normalized control model.
Construct reusable collectors and schemas as reference architectures for automated compliance.
Establish the system of record for controls, mappings, and evidence through build-vs-buy analysis.
Identify control drift and route findings to owners with clear remediation paths.
Translate complex frameworks like CMMC, NIST 800-171, and FedRAMP into automatable technical checks.
Set the technical direction for the GRC engineering function.
Mentor and lead a growing team of engineers building compliance tooling.

What we're looking for

6+ years in security engineering, GRC, or a related role including hands-on building of automation or data pipelines.
Strong programming ability in a general-purpose language such as Go, Python, or Rust.
Hands-on experience operationalizing compliance frameworks like CMMC, NIST 800-171, 800-53, FedRAMP, and SOC 2.
Experience designing data collection and integration across cloud and SaaS systems using APIs, log/event pipelines, and data lakes.
Experience with infrastructure as code in a production capacity using tools like Terraform or AWS CDK.
Track record of setting technical direction and mentoring engineers.
Eligible to obtain and maintain a U.S. Secret clearance.
Experience with continuous control monitoring, GRC platforms, security data lakes, or Kubernetes hardening (preferred).

Similar roles

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000–$253,000

Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation

6+ yrs exp

Save

Lead Security Engineer, GRC

Anduril Industries

Washington, DC 16 days ago $166,000–$253,000

Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation

6+ yrs exp

Save

Lead Security Engineer, GRC

Anduril Industries

Seattle, WA 16 days ago $166,000–$253,000

Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation

6+ yrs exp

Save

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000–$213,600

Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

Save

Senior Cloud Infrastructure Engineer

Anduril Industries

Washington, DC 43 days ago $146,000–$194,000

AWS Azure GCP Terraform CloudFormation Bicep Python Go Rust Kubernetes EKS GKE AKS CI/CD CSPM FedRAMP SOC 2 CMMC Infrastructure as Code Cloud Security

Save

Staff Security Engineer, GRC

Oscar Health

New York, NY 21 days ago $245,916–$286,902

GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management

7+ yrs exp Hybrid

Save