Senior Software Engineering Manager, Security Applications & Tools

Team Overview

The Security Applications & Tools (SAT) team within Lattice Platform Security team builds the software systems that detect, manage, and remediate vulnerabilities across Anduril's entire product ecosystem at scale. The team owns a vertically integrated scanning platform, policy-as-code enforcement engines, and vulnerability management infrastructure — all custom-built to meet the unique demands of defense-grade software. This is a software engineering team that happens to work in the security domain, not a team that configures off-the-shelf security products.

Job Description

We're looking for a Senior Engineering Manager who can lead the SAT team while remaining deeply technical and hands-on. This is a cross-functional role: you'll work directly with business lines across Anduril to understand their security challenges, translate those into engineering requirements, design solutions, and actively contribute to implementation. You'll own the team's roadmap for application security, vulnerability management, and cyber accreditation tooling — and you'll build alongside the engineers you lead.

Key Responsibilities

• Lead and grow a team of software engineers building security automation and vulnerability management systems
• Set technical direction for the team's scanning infrastructure, policy engines, and vulnerability management platform
• Work directly with business lines to understand security use cases, concerns, and compliance requirements, translating them into actionable engineering plans
• Design and architect distributed systems for scalable vulnerability detection, policy enforcement, and remediation workflows
• Contribute hands-on to implementation in Go, Python, and infrastructure-as-code
• Own the team's roadmap for application security tooling, balancing business line needs with platform-wide improvements
• Drive technical decisions around build-vs-buy, ensuring the team builds custom solutions where off-the-shelf tools fall short
• Collaborate with Platform Security Engineering on shared infrastructure and cross-cutting security concerns
• Establish engineering standards for code quality, testing, and operational excellence within the team
• Manage career development, hiring, and performance for team members

Required Qualifications

• 8+ years of software engineering experience, with at least 3 years in an engineering management role
• Strong hands-on software development skills in Go or Python — you still write and review code regularly
• Experience building and operating distributed systems or data pipelines (event-driven architectures, message queues, serverless)
• Demonstrated ability to work cross-functionally: gathering requirements from non-engineering stakeholders, translating business needs into technical plans, and driving execution
• Experience with at least one of: application security tooling, vulnerability management systems, or CI/CD security integration
• Track record of building and retaining high-performing engineering teams
• Strong communication skills with proven ability to influence technical decisions across organizational boundaries
• Eligible to obtain and maintain active U.S. Secret security clearance

Preferred Qualifications

• Experience with AWS services (SQS, Lambda, S3, ECR) in production environments
• Familiarity with vulnerability scanning tools (Trivy, Grype, Semgrep, Syft) and how to integrate or extend them programmatically
• Experience with Terraform and infrastructure-as-code practices
• Background in defense, aerospace, or other regulated industries with compliance requirements (STIGs, NIST, cyber accreditation)
• Experience with policy-as-code frameworks (OPA/Rego, Conftest)
• Familiarity with container security, SBOM generation, and software supply chain security