Lead Security Engineer, GRC

Anduril Industries

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Seattle, WA
Salary
$166,000–$253,000 / yr
Posted
16 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $182k
This role $210k
$118k most similar roles pay here $268k

This role pays more than 76% of similar roles. Most pay $155,750–$208,975 — the shaded band above. At the midpoint, this role pays about $210k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Anduril Industries

Anduril Industries is a defense technology company that builds advanced hardware and software systems for national security, including autonomous drones, surveillance systems, and the Lattice AI command platform.

Anduril Industries currently has 1697 open roles on FindRole.

Listed pay typically runs $146,000–$194,000 across 1504 roles with salary data.

Most-posted roles

View all roles at Anduril Industries

At a glance

TL;DR · Lead Security Engineer, GRC

Lead Security Engineer, GRC joins the Security Engineering team to build the engineering core of the company's governance, risk, and compliance program. This role focuses on developing pipelines and tooling that transform systems into continuous evidence of compliance by replacing manual audit processes with automated solutions. The engineer will construct reusable collectors, manage a system of record for controls, and translate frameworks like CMMC, NIST 800-171, FedRAMP/IL5, and SOC 2 into automatable technical checks. Key responsibilities include mentoring a growing team and setting technical direction. Required skills include proficiency in general-purpose languages such as Go, Python, or Rust, along with experience in infrastructure as code using Terraform or AWS CDK. The role also involves managing data collection across cloud and SaaS systems via APIs, log pipelines, and data lakes to solve complex compliance automation problems.

What you'll do

  • Build pipelines that collect system evidence and map it to a normalized control model.
  • Construct reusable collectors and schemas as reference architectures for automated compliance.
  • Establish the system of record for controls, mappings, and evidence through build-vs-buy analysis.
  • Identify control drift and route findings to owners with clear remediation paths.
  • Translate complex frameworks like CMMC, NIST 800-171, and FedRAMP into automatable technical checks.
  • Set the technical direction for the GRC engineering function.
  • Mentor and grow a team of engineers building compliance tooling and infrastructure.

What we're looking for

  • 6+ years in security engineering, GRC, or a related role including hands-on building of automation or data pipelines.
  • Strong programming ability in a general-purpose language such as Go, Python, or Rust.
  • Hands-on experience operationalizing compliance frameworks like CMMC, NIST 800-171, 800-53, FedRAMP, and SOC 2.
  • Experience designing data collection and integration across cloud and SaaS systems using APIs, log/event pipelines, and data lakes.
  • Experience with infrastructure as code in a production capacity using tools like Terraform or AWS CDK.
  • Track record of setting technical direction and mentoring engineers.
  • Eligible to obtain and maintain a U.S. Secret clearance.
  • Experience with continuous control monitoring, GRC platforms, security data lakes, or Kubernetes hardening (preferred).

More like this

Similar roles

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Washington, DC 16 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Boston, MA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes
6+ yrs exp

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000$213,600
Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

Senior Cloud Infrastructure Engineer

Anduril Industries

Washington, DC 43 days ago $146,000$194,000
AWS Azure GCP Terraform CloudFormation Bicep Python Go Rust Kubernetes EKS GKE AKS CI/CD CSPM FedRAMP SOC 2 CMMC Infrastructure as Code Cloud Security

Staff Security Engineer, GRC

Oscar Health

New York, NY 21 days ago $245,916$286,902
GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management
7+ yrs exp Hybrid