Anduril is a defense technology company, bringing Silicon Valley talent and funding to the defense sector. Our technology helps our customers solve their toughest challenges by enabling them to make better, more informed decisions in life-and-death situations. We’ve assembled a diverse team of experts in artificial intelligence, computer vision, sensor fusion, optics, and data analysis that are creating software and hardware solutions to radically evolve the capabilities of the United States and our allies. If you are passionate about solving problems that have real impact, come join Anduril and build the future of defense.

As a cybersecurity operations analyst intern, you will be sitting on the front lines of defending Anduril against determined cyber adversaries. You’ll investigate alerts across a wide spectrum of systems, including corporate, cloud, command and control environments, product telemetry, and everything in between. Your efforts will keep our company, people, and products safe from attackers intent on stealing intellectual property, and sabotaging our operations.

You’ll stay abreast of emerging adversary cyberattack techniques across Mac, Windows, and Linux operating systems and utilize this knowledge to hunt for nefarious activity. You will also use the institutional knowledge gained from investigations to recommend and engineer new attack detections and defensive controls across the enterprise.

WHAT YOU'LL DO

• Triage and investigate potential computer security incidents.
• Analyzes security logs from a variety of sources to include corporate, cloud, and operational networks.
• Proactively hunt for threats across Anduril’s environment.
• Research emerging attacker tradecraft and engineers robust monitoring and detection logic to mitigate.

REQUIRED QUALIFICATIONS

• Background or interest in security operations, incident response, intrusion detection, or forensics.
• Knowledge of modern attacker tradecraft and techniques as outlined in killchain frameworks e.g. MITRE ATT&CK.
• Knowledge of Windows, Mac, and Linux operating system internals and logging mechanisms.
• Knowledge of event monitoring tools like Splunk or other SIEMs.
• Familiarity with disparate environments including cloud systems and endpoints.
• Have participated in or have knowledge of intrusion detection, response, and remediation
• U.S. Person status is required as this position needs to access export controlled data.

PREFERRED QUALIFICATIONS

• Experience with incident response in Zero-Trust Environments
• Experience writing low-level, complex event detections
• Knowledge of scripting languages like Python and Powershell

Anduril is an equal-opportunity employer, and we encourage candidates from all backgrounds to apply. If you are someone passionate to work on problems that matter, we’d love to hear from you!