Lead Security Engineer, GRC

Anduril Industries

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Washington, DC
Salary
$166,000–$253,000 / yr
Posted
16 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $182k
This role $210k
$118k most similar roles pay here $268k

This role pays more than 76% of similar roles. Most pay $155,750–$208,975 — the shaded band above. At the midpoint, this role pays about $210k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Anduril Industries

Anduril Industries is a defense technology company that builds advanced hardware and software systems for national security, including autonomous drones, surveillance systems, and the Lattice AI command platform.

Anduril Industries currently has 1697 open roles on FindRole.

Listed pay typically runs $146,000–$194,000 across 1504 roles with salary data.

Most-posted roles

View all roles at Anduril Industries

At a glance

TL;DR · Lead Security Engineer, GRC

Lead Security Engineer, GRC joins the Security Engineering team to build the core infrastructure for the company's governance, risk, and compliance program. This individual will develop automated pipelines to collect system evidence, map it to normalized control models, and create reusable collectors as reference architectures. The role involves establishing systems of record for controls, performing build-versus-buy analyses, and translating frameworks like CMMC, NIST 800-171, FedRAMP/IL5 into automatable technical checks. Key responsibilities include mentoring a growing engineering team and setting technical direction. Required skills include proficiency in general-purpose languages such as Go, Python, or Rust, along with experience in infrastructure as code using Terraform or AWS CDK. The role focuses on solving the problem of manual audit preparation by creating continuous evidence collection across cloud and SaaS systems via APIs and log pipelines.

What you'll do

  • Build pipelines that collect system evidence and map it to a normalized control model.
  • Construct reusable collectors and schemas as reference architectures for automated compliance.
  • Establish the system of record for controls, mappings, and evidence while leading build-vs-buy analyses.
  • Identify control drift and route findings to owners with clear remediation paths.
  • Translate complex frameworks like CMMC, NIST 800-171, and FedRAMP into automatable technical checks.
  • Set the technical direction for the GRC engineering function.
  • Mentor and grow a team of engineers building compliance automation tools.

What we're looking for

  • 6+ years in security engineering, GRC, or a related role including hands-on building of automation or data pipelines.
  • Strong programming ability in a general-purpose language such as Go, Python, or Rust.
  • Hands-on experience operationalizing compliance frameworks like CMMC, NIST 800-171, 800-53, FedRAMP, and SOC 2.
  • Experience designing data collection and integration across cloud and SaaS systems using APIs, log/event pipelines, and data lakes.
  • Experience with infrastructure as code in a production capacity using tools like Terraform or AWS CDK.
  • Track record of setting technical direction and mentoring engineers.
  • Eligible to obtain and maintain a U.S. Secret clearance.
  • Experience with continuous control monitoring, GRC platforms, security data lakes, or Kubernetes hardening (preferred).

More like this

Similar roles

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Seattle, WA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Boston, MA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes
6+ yrs exp

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000$213,600
Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

Senior Cloud Infrastructure Engineer

Anduril Industries

Washington, DC 43 days ago $146,000$194,000
AWS Azure GCP Terraform CloudFormation Bicep Python Go Rust Kubernetes EKS GKE AKS CI/CD CSPM FedRAMP SOC 2 CMMC Infrastructure as Code Cloud Security

Staff Security Engineer, GRC

Oscar Health

New York, NY 20 days ago $245,916$286,902
GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management
7+ yrs exp Hybrid