Lead Security Engineer, GRC

Anduril Industries

Confirmed live 2 days ago Trusted

Quick summary

Work type
On-site
Location
Costa Mesa, CA
Salary
$166,000–$253,000 / yr
Posted
168 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $182k
This role $210k
$117k most similar roles pay here $268k

This role pays more than 76% of similar roles. Most pay $155,000–$208,975 — the shaded band above. At the midpoint, this role pays about $210k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Anduril Industries

Anduril Industries is a defense technology company that builds advanced hardware and software systems for national security, including autonomous drones, surveillance systems, and the Lattice AI command platform.

Anduril Industries currently has 1697 open roles on FindRole.

Listed pay typically runs $146,000–$194,000 across 1504 roles with salary data.

Most-posted roles

View all roles at Anduril Industries

At a glance

TL;DR · Lead Security Engineer, GRC

Lead Security Engineer, GRC joins the Security Engineering team to build the engineering core of the GRC program by creating pipelines and tooling that transform systems into continuous evidence of compliance. This role involves building data collection pipelines, constructing reusable collectors and schemas as reference architectures, and establishing a system of record for controls and mappings. The engineer will translate frameworks like CMMC, NIST 800-171, FedRAMP/IL5, and SOC 2 into automatable technical checks while mentoring a growing team. Key technical requirements include proficiency in general-purpose languages such as Go, Python, or Rust, along with experience in infrastructure as code using Terraform or AWS CDK. The role focuses on solving the problem of manual audit preparation by automating evidence collection across cloud and SaaS systems through APIs, log pipelines, and data lakes.

What you'll do

  • Build pipelines that collect system evidence and map it to a normalized control model.
  • Construct reusable collectors and schemas as reference architectures for automated compliance.
  • Establish the system of record for controls, mappings, and evidence through build-vs-buy analysis.
  • Identify control drift and route findings to owners with clear remediation paths.
  • Translate complex frameworks like CMMC, NIST 800-171, and FedRAMP into automatable technical checks.
  • Set the technical direction for the GRC engineering function.
  • Mentor and lead a growing team of engineers building compliance tooling.

What we're looking for

  • 6+ years of experience in security engineering, GRC, or a related role including building automation or data pipelines.
  • Strong programming ability in a general-purpose language such as Go, Python, or Rust.
  • Hands-on experience operationalizing compliance frameworks including CMMC, NIST 800-171, 800-53, FedRAMP, and SOC 2.
  • Experience designing data collection and integration across cloud and SaaS systems using APIs, log/event pipelines, and data lakes.
  • Experience with infrastructure as code tools like Terraform or AWS CDK in a production capacity.
  • Proven track record of setting technical direction and mentoring engineers.
  • Ability to work autonomously and drive alignment across partner teams for ambiguous problems.
  • Eligible to obtain and maintain a U.S. Secret clearance.

More like this

Similar roles

Lead Security Engineer, GRC

Anduril Industries

Washington, DC 16 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Seattle, WA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Boston, MA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes
6+ yrs exp

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000$213,600
Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

Senior Cloud Infrastructure Engineer

Anduril Industries

Washington, DC 43 days ago $146,000$194,000
AWS Azure GCP Terraform CloudFormation Bicep Python Go Rust Kubernetes EKS GKE AKS CI/CD CSPM FedRAMP SOC 2 CMMC Infrastructure as Code Cloud Security

Staff Security Engineer, GRC

Oscar Health

New York, NY 21 days ago $245,916$286,902
GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management
7+ yrs exp Hybrid