Systems Safety Engineer, Command & Control (C2)

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

About the Team

At Anduril, our Battlespace Awareness Command and Control Software team specializes in solving complex, real-world problems through cutting-edge algorithms and intelligent software integrations. Operating in small, innovative teams, we push the boundaries of what's possible to deliver advanced technologies with mission-critical applications. Our commitment doesn't end with academic research or proof-of-concept experiments; we measure our success by the real-world impact of our deployed solutions. Inspired by Arthur C. Clarke's vision — "Any sufficiently advanced technology is indistinguishable from magic" — we aim to achieve groundbreaking results in path planning, route optimization, and autonomous mission execution at the command and control layer

As C2 capabilities move from prototype to fielded, safety-critical operational systems supporting the Army, Navy, Air Force, and Missile Defense Agencies, we need a Systems Safety Engineer who can ensure our software-defined, AI-enabled decision-making systems are demonstrably safe, rigorously validated, and defensible to our government customers.

About the Job

We are looking to hire a Systems Safety Engineer to join our rapidly growing team in Broomfield, CO. The Battlespace Awareness team develops tactical sense- and decision-making software that provides advanced capabilities for Anduril's command and control (C2) products. This software must work with various combinations of compute hardware, connected sensor/effector hardware, and supporting software services. It must be effective, robust, and safe across various configurations, mission sets, and customer experiences.

Because our C2 products issue tasking to kinetic and non-kinetic effectors, integrate with autonomous platforms, and operate in human-on-the-loop and human-in-the-loop decision cycles, safety is a first-class engineering discipline, not a downstream compliance check. We need a Systems Safety Engineer who can own end-to-end safety assurance: from requirements decomposition and hazard analysis through software performance characterization, validation against government standards, and evidence packages that hold up under customer, regulatory, and legal scrutiny.

What You'll Do

• Own systems safety end-to-end for C2 software and its interfaces to sensors, effectors, and autonomous platforms — identify and solve problems between the seams and push through to reach desired outcomes
• Lead safety requirements gathering, decomposition, and traceability across cross-functional teams, translating mission-, system-, and government-level requirements into subsystem-level functional, performance, and safety specifications. Define success in the face of ambiguity
• Validate that our systems are safe — architect and execute performance-characterization campaigns for safety-critical software behaviors (classification, sensor/effector management, threat forecasting, autonomous tasking) using both simulated data and field-testing data
• Apply industry and government safety standards rigorously — including MIL-STD-882E (DoD System Safety) and adjacent frameworks, where relevant.
• Conduct and document safety analyses: Functional Hazard Analysis (FHA), Fault Tree Analysis (FTA), Failure Modes & Effects Analysis (FMEA/FMECA), Preliminary Hazard Analysis (PHA), System Safety Assessment (SSA), and Common Cause Analysis (CCA).
• Characterize software-driven performance for safety — quantify false-track rates, misclassification consequences, latency-under-load, degraded-mode behavior, and human-machine teaming failure modes; translate results into risk assessments and mitigation strategies that protect the warfighter and limit liability exposure to Anduril.
• Validate compliance with government requirements — partner with program offices (Army, MDA, Air Force, Navy) to establish means of compliance, author certification and verification artifacts, and represent Anduril at safety review boards and design reviews (SRR, PDR, CDR, TRR).
• Develop test plans, acceptance criteria, and analysis tools to evaluate system safety and performance; use data-driven analysis to verify customer safety requirements are met, and create artifacts to trace safety performance as the system evolves
• Integrate safety up front into the development lifecycle — not as a side group, but as a discipline embedded with algorithm engineers, software engineers, and product teams; build lightweight, high-velocity safety processes that match Anduril's product cadence without compromising rigor.
• Develop and implement modeling and simulation frameworks to validate safety-critical algorithmic performance, test system behavior under nominal and adversarial scenarios, and provide data-driven insights for continuous safety improvement

Required Qualifications

• 5+ years of systems safety, systems engineering, or safety-critical software engineering experience. Degree in Engineering, Physics, Computer Science, Mathematics, or a related field
• Demonstrated application of MIL-STD-882 (preferably 882E) across a defense program lifecycle — including hazard tracking, risk assessment codes, and closure of safety-significant items.
• Hands-on experience performing Fault Tree Analysis (FTA) and at least two of: FHA, FMEA/FMECA, PHA, SSA, CCA — with artifacts you can walk us through.
• Requirements engineering fluency — decomposition, traceability, and verification/validation. Comfortable translating vague customer intent into testable safety requirements
• Experience validating that safety and performance requirements are actually met — through analysis, simulation, HITL/SITL, and field testing
• Familiarity with government/customer requirements processes and ability to engage credibly with DoD program offices, safety review boards, and regulatory authorities on means of compliance and certification basis
• Proficiency with Python (and/or MATLAB) for data parsing, modeling & simulation, data analysis, and visualization of safety and performance evidence
• Demonstrated experience collaborating across cross-functional teams and communicating complex technical findings clearly to developers, system leads, and customers
• Comfortable working with ambiguity, evolving priorities, and challenging problems
• Must be authorized to work in the United States
• Up to 25% travel to customer sites and test events

Preferred Qualifications

• Experience applying MIL-STD-882 to software-intensive or AI/ML-enabled systems (software safety, autonomy assurance, algorithmic risk)
• Prior systems safety work on C2, battle management, air & missile defense, counter-UAS, or autonomous systems programs
• Familiarity with MBSE using e.g. AFSIM, and confident applying Monte Carlo analysis
• Familiarity with Linux OS and comfort obtaining data from software platforms using command-line tools
• Familiarity with processes and constraints for real-time and safety-critical software
• Working knowledge of C/C++ or Rust — coding full-time is not required, but understanding is valuable; our C2 stack uses Rust, C++, Python, etc.
• Understanding of the full software development lifecycle, CI/CD, and modern software safety practice (safety cases, assurance arguments, GSN)
• Previous experience in a defense, aerospace, or naval environment
• Experience with any of the following: radar, tracking systems, sensor fusion, distributed systems, autonomous systems, ML/AI systems

We request transcripts as part of the early application process to understand your academic background and how your coursework supports the skills deemed critical for the role. Transcripts help us assess your technical and analytical abilities, complementing our interview process in which we also evaluate practical experience and cultural fit. If you choose not to share your transcripts, you will need to provide detailed information regarding your academic performance in relevant courses, including projects and coursework specifics, to ensure we evaluate your academic accomplishments properly. If you do provide academic transcripts, feel free to redact non-technical information (e.g., student ID, dates, non-technical coursework, etc.). Unofficial transcripts obtained online acceptable for this assessment.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: 

Benefits

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits.

Protecting Yourself from Recruitment Scams

Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.

To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:

• No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.

• Please always verify communications:
  • Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address.
  • Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com. 

• Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.

• What to Do If You Suspect Fraud: Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to contact@anduril.com. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts.

Data Privacy

To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. 

By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.