Colorwave

Security Specialist

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril's family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

The Security Specialist will work in a dynamic fast-paced environment supporting programs for both the DoD and IC to develop, implement, and administer the security program in accordance with DoD 5205.07 manuals, DoD 5105.21 manuals, NISPOM and JSIG. The Security Specialist will be responsible for personnel security, industrial security, information security, and hardware production security.

What You'll Do

• Interpret and implement security guidance, including ICDs, SEADs, 32 CFR Part 117 (NISPOM Rule), and other applicable policies and directives.
• Perform all facets of the Personnel Security Program, providing guidance and processing for Secret, Top Secret, and Sensitive Compartmented Information (SCI) clearances and eligibility. This includes conducting security briefings, obtaining non-disclosure agreements (NDAs), and managing other personnel security actions.
• Perform all aspects of physical security by providing day-to-day support for badging, access control, and visitor control.
• COMSEC Management: Serve as a COMSEC Custodian or Alternate. Manage COMSEC accounts, keying material, and Controlled Cryptographic Items (CCI) in strict compliance with NSA, CSS, and service-specific regulations. Oversee the receipt, custody, distribution, safeguarding, accounting, destruction, and transfer of COMSEC materials.
• Manufacturing Security: Develop, implement, and monitor security protocols tailored to hardware manufacturing environments. Secure production floors, engineering bays, and prototyping labs against industrial espionage, sabotage, and unauthorized access.
• Production Security: Manage end-to-end production security workflows. Secure the hardware supply chain, implement scrap-management and destruction procedures for proprietary/sensitive prototype components, and enforce clean-desk and hardware-protection policies on the production floor.
• Product Security: Partner with hardware, software, and systems engineering teams to safeguard finished defense systems prior to deployment. Support anti-tamper (AT) initiatives, secure configuration management, and establish strict chain-of-custody and transport security protocols for shipping finished products to government customers.
• Provide comprehensive program security support for program managers and other personnel, offering classification guidance, managing incoming and outgoing visit certifications, facilitating foreign travel reporting, and assisting with proposal development.
• Ensure strict adherence to classified material control procedures, encompassing proper accounting, handling, transmission, transportation, packaging, safeguarding, and destruction.
• Investigate security infractions, COMSEC incidents, supply chain compromises, or manufacturing anomalies, and prepare required reports.
• Build and maintain strong relationships with government security counterparts.
• Develop and deliver mandatory and ad-hoc security awareness training programs (including COMSEC briefing/briefouts, OPSEC for manufacturing environments, and secure hardware handling) as required by regulations and requested by the customer.
• Collaborate with the Facility Security Officer (FSO) and Information System Security Officer (ISSO) to ensure proper authorization and approval of equipment entering secure areas.
• Partner with the ISSO and Information System Security Manager (ISSM) on the management and processing of information system access requests and accounts.

Required Qualifications

• Possess a deep understanding of security principles, concepts, practices, products, and services, with the ability to implement mitigating controls and effectively disseminate security procedures.
• Demonstrated thorough knowledge of multiple DoD and service-specific security regulations and instructions, particularly NISPOM and DoDM 5202.07 Vol 2. JAFAN experience is preferred.
• Demonstrated experience in COMSEC account management, including hands-on experience with cryptographic fill devices (e.g., SKLs, KIKs) and key management policies.
• Proven experience safeguarding physical hardware, engineering laboratories, testing facilities, or advanced manufacturing environments.
• Basic understanding of supply chain risk management (SCRM) and the secure handling/disposal of proprietary tech and military-grade components.
• Highly motivated, proactive, and professionally assertive self-starter capable of working independently in a fast-paced hardware development, manufacturing, and COMSEC setting.
• Proven ability to constructively engage, analyze, and resolve complex security challenges and situations.
• Superior verbal, written, and presentation skills, complemented by excellent interpersonal abilities.
• Proficiency with MS Office Suite (MS Word, Excel, PowerPoint, and Outlook).
• Willingness to work flexible hours, including before/after typical office hours.
• Currently possesses and is able to maintain an active Top Secret security clearance.

Preferred Qualifications

• Completed NSA-approved COMSEC Custodian training (e.g., KMI Course, IAEC 2112/2110) and familiarity with Key Management Infrastructure (KMI).
• Experience in aerospace, defense, or high-tech manufacturing facility security.
• Familiarity with Anti-Tamper (AT) guidelines and NSA requirements for safeguarding defense articles.
• Experience applying NIST SP 800-171, CMMC, or DFARS supply chain security controls.
• Experience with DISS and/or Scattered Castles.
• SIMS or other security management tools.
• Minimum of five (5) years of relevant specialized security experience.

US Salary Range $87,000 —$116,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

Benefits

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you're supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits.

Protecting Yourself from Recruitment Scams

Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.

To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:

• No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.

• Please always verify communications:
  • Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address.
  • Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com.

• Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.