Saas Security Risk Analyst Jobs (NOW HIRING)

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

The Counterintelligence (CI) and Security Investigations Team’s safeguards Anduril’s workforce and supply chain by proactively identifying risk, mitigating threats and delivering actionable investigative insights. The team helps ensure our security environment remains vigilant and resilient so that our strategic interests are preserved. We are committed to anticipating and mitigating risks and threats enabling Anduril to innovate and operate confidently in a dynamic global environment.

Anduril is seeking a professional to support the CI and Security Investigations team in a unique opportunity to help strategize, socialize and implement a CI and security risk program that requires significant critical thinking, creativity, complex problem solving and interpersonal skills, as well as the ability to work across a rapidly growing, global, dynamic organization to identify and mitigate threats. The Counterintelligence & Security Risk Analyst Lead is responsible for analyzing threats from nation state actors and insiders affecting Anduril's workforce, technologies and supply chain globally. The role will involve the development and support of analytic efforts and work-streams that integrate across key business processes and stakeholders, spanning people vetting, supplier and vendor risk, and enterprise CI analysis, to enable rapid mitigation and informed decision making. This position will leverage a variety of internal and external data sets and tools to develop a robust understanding of the threat environment. The Analyst must be a self‑starter that can operate independently and be responsive to fast paced and dynamic operational and threat environments, and must possess a deep understanding of CI, intelligence analysis, risk management, and a demonstrated ability to analyze and communicate complex risks and threats.

• Support the development of CI analysis tailored to the defense industry’s unique threats and requirements, spanning workforce, technology and supply chain risk.
• Analyze threats from nation state actors, reviewing data from multiple sources to identify anomalous behaviors and other indicators.
• Execute workforce, visitor and supplier vetting initiatives, conducting thorough risk assessments and initial investigations to ensure Anduril is engaging with trusted people and vendors.
• Support a repeatable, scalable process for vetting of candidates, visitors, suppliers and vendors, and continuously monitor existing relationships for emerging risks.
• Coordinate with federal agencies, including the Department of Defense (DoD), Intelligence Community (IC), and Federal Law Enforcement, to access relevant threat information and stay current on evolving adversary tactics, techniques and procedures.
• Establish and leverage collaborative partnerships across internal stakeholders, including product, supply chain, legal, HR, and InfoSec teams, to identify data necessary to support robust research and analysis.
• Produce tailored and strategic risk assessments, detailed reports and presentations on findings, case studies, threat assessments, and recommended actions for multiple audiences to include senior leadership.
• Develop and implement analytic methodologies to assess counterintelligence, supplier and people related risks.
• Provide analytic support to investigations.
• Support the development of procedures, processes, risk frameworks and documentation that comply with government regulations and contractual obligations, and produce key metrics for leadership on a recurring basis.
• Monitor, analyze and communicate trends in people or supplier risk and nation state-related risk and threats to help shape vetting and mitigation initiatives.
• Support the development of training and awareness materials and present tailored briefings to internal audiences.
• Travel as needed to support risk assessments at various Anduril site locations or external events.

• Bachelor's or Master's degree in Security or Intelligence Studies, Political Science, Criminal Justice, or a related field.
• 8 years of relevant work experience in CI analysis, intelligence operations or analysis, or people and supplier risk vetting, assessing complex threats from nation state actors and other nation state-related risk.
• Experience conducting risk and threat assessments and presenting analysis to inform executive decision making.
• Demonstrated ability leveraging multiple data sets and tools to support complex research and analysis, as well as developing risk assessments and risk mitigation recommendations.
• Experience conducting public record research and investigations (e.g., criminal, civil, financial, corporate, property, licensing, or court records) in support of people and supplier vetting, or CI-related assessments.
• Ability to synthesize public record findings with open-source and other data sets to assess credibility, relevance, and risk, and communicate findings to technical and executive stakeholders.
• Experience with CI risk assessment methodologies and CI threat analysis.
• Experience leveraging critical thinking skills to creatively solve complex problems and produce analysis and recommendations in a fast-paced environment.
• Demonstrated understanding of the intelligence threats facing industry.
• Familiarity with relevant laws, regulations, and standards governing defense industry security and the requirements of U.S. security clearance holders.
• Excellent critical thinking, collaboration and interpersonal skills, with a proven ability to effectively analyze and communicate complex risks.
• Possess an active security clearance.

• Understanding of ITAR/EAR regulations, compliance requirements, and government contract requirements related to the supply chain.
• Experience conducting CI and security related risk and threat assessments in government and private industry.
• Previous experience with people-related and supplier-related vetting initiatives in a defense contractor environment.
• Strong familiarity with people vetting, investigative, and supply chain risk management software and tools.
• Formal analytic training and/or certifications.
• Experience designing and executing CI/Security training.
• Prior experience partnering with legal, HR, and InfoSec teams to bring about positive outcomes and facilitate robust processes.

US Salary Range

$129,000 — $171,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits.

To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/.

By submitting your application, you consent to Anduril Industries using a third‑party service provider to conduct pre‑employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third‑party service provider provides risk‑intelligence services that may include analysis of sanctions and watchlists, adverse media, public‑record information, and other lawful open‑source or commercial data sources. This third‑party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.