Systems Safety Engineer, Command & Control (C2)

About the Team

At Anduril our Battlespace Awareness Command and Control Software team specializes in solving complex real-world problems through cutting-edge algorithms and intelligent software integrations. Operating in small innovative teams we push the boundaries of whats possible to deliver advanced technologies with mission-critical applications. Our commitment doesnt end with academic research or proof-of-concept experiments; we measure our success by the real-world impact of our deployed solutions. Inspired by Arthur C. Clarkes vision Any sufficiently advanced technology is indistinguishable from magic we aim to achieve groundbreaking results in path planning route optimization and autonomous mission execution at the command and control layer

As C2 capabilities move from prototype to fielded safety-critical operational systems supporting the Army Navy Air Force and Missile Defense Agencies we need a Systems Safety Engineer who can ensure our software-defined AI-enabled decision-making systems are demonstrably safe rigorously validated and defensible to our government customers.

About the Job

We are looking to hire a Systems Safety Engineer to join our rapidly growing team in Broomfield CO. The Battlespace Awareness team develops tactical sense- and decision-making software that provides advanced capabilities for Andurils command and control (C2) products. This software must work with various combinations of compute hardware connected sensor/effector hardware and supporting software services. It must be effective robust and safe across various configurations mission sets and customer experiences.

Because our C2 products issue tasking to kinetic and non-kinetic effectors integrate with autonomous platforms and operate in human-on-the-loop and human-in-the-loop decision cycles safety is a first-class engineering discipline not a downstream compliance check. We need a Systems Safety Engineer who can own end-to-end safety assurance: from requirements decomposition and hazard analysis through software performance characterization validation against government standards and evidence packages that hold up under customer regulatory and legal scrutiny.

What Youll Do

• Own systems safety end-to-end for C2 software and its interfaces to sensors effectors and autonomous platforms identify and solve problems between the seams and push through to reach desired outcomes
• Lead safety requirements gathering decomposition and traceability across cross-functional teams translating mission- system- and government-level requirements into subsystem-level functional performance and safety specifications. Define success in the face of ambiguity
• Validate that our systems are safe architect and execute performance-characterization campaigns for safety-critical software behaviors (classification sensor/effector management threat forecasting autonomous tasking) using both simulated data and field-testing data
• Apply industry and government safety standards rigorously including MIL-STD-882E (DoD System Safety) and adjacent frameworks where relevant.
• Conduct and document safety analyses: Functional Hazard Analysis (FHA) Fault Tree Analysis (FTA) Failure Modes & Effects Analysis (FMEA/FMECA) Preliminary Hazard Analysis (PHA) System Safety Assessment (SSA) and Common Cause Analysis (CCA).
• Characterize software-driven performance for safety quantify false-track rates misclassification consequences latency-under-load degraded-mode behavior and human-machine teaming failure modes; translate results into risk assessments and mitigation strategies that protect the warfighter and limit liability exposure to Anduril.
• Validate compliance with government requirements partner with program offices (Army MDA Air Force Navy) to establish means of compliance author certification and verification artifacts and represent Anduril at safety review boards and design reviews (SRR PDR CDR TRR).
• Develop test plans acceptance criteria and analysis tools to evaluate system safety and performance; use data-driven analysis to verify customer safety requirements are met and create artifacts to trace safety performance as the system evolves
• Integrate safety up front into the development lifecycle not as a side group but as a discipline embedded with algorithm engineers software engineers and product teams; build lightweight high-velocity safety processes that match Andurils product cadence without compromising rigor.
• Develop and implement modeling and simulation frameworks to validate safety-critical algorithmic performance test system behavior under nominal and adversarial scenarios and provide data-driven insights for continuous safety improvement

Required Qualifications

• 5 years of systems safety systems engineering or safety-critical software engineering experience. Degree in Engineering Physics Computer Science Mathematics or a related field
• Demonstrated application of MIL-STD-882 (preferably 882E) across a defense program lifecycle including hazard tracking risk assessment codes and closure of safety-significant items.
• Hands-on experience performing Fault Tree Analysis (FTA) and at least two of: FHA FMEA/FMECA PHA SSA CCA with artifacts you can walk us through.
• Requirements engineering fluency decomposition traceability and verification/validation. Comfortable translating vague customer intent into testable safety requirements
• Experience validating that safety and performance requirements are actually met through analysis simulation HITL/SITL and field testing
• Familiarity with government/customer requirements processes and ability to engage credibly with DoD program offices safety review boards and regulatory authorities on means of compliance and certification basis
• Proficiency with Python (and/or MATLAB) for data parsing modeling & simulation data analysis and visualization of safety and performance evidence
• Demonstrated experience collaborating across cross-functional teams and communicating complex technical findings clearly to developers system leads and customers
• Comfortable working with ambiguity evolving priorities and challenging problems
• Must be authorized to work in the United States
• Up to 25% travel to customer sites and test events

Preferred Qualifications

• Experience applying MIL-STD-882 to software-intensive or AI/ML-enabled systems (software safety autonomy assurance algorithmic risk)
• Prior systems safety work on C2 battle management air & missile defense counter-UAS or autonomous systems programs
• Familiarity with MBSE using e.g. AFSIM and confident applying Monte Carlo analysis
• Familiarity with Linux OS and comfort obtaining data from software platforms using command-line tools
• Familiarity with processes and constraints for real-time and safety-critical software
• Working knowledge of C/C or Rust coding full-time is not required but understanding is valuable; our C2 stack uses Rust C Python etc.
• Understanding of the full software development lifecycle CI/CD and modern software safety practice (safety cases assurance arguments GSN)
• Previous experience in a defense aerospace or naval environment
• Experience with any of the following: radar tracking systems sensor fusion distributed systems autonomous systems ML/AI systems

The salary range for this role is an estimate based on a wide range of compensation factors inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience education and/or training critical skills and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Andurils total compensation package. Additionally Anduril offers top-tier benefits for full-time employees including:

At Anduril we invest in our people. Our comprehensive competitive benefits package (available at little to no cost to employees) ensures youre supported in health recovery and whatever comes next.For more information Explore Our Benefits.

To view Andurils candidate data privacy policy please visit submitting your application you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk integrity and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists adverse media public-record information and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology intellectual property and organizational security.