Systems Safety Engineer, Command & Control (C2)

About the Team

At Anduril, our Battlespace Awareness Command and Control Software team specializes in solving complex, real-world problems through cutting-edge algorithms and intelligent software integrations. Operating in small, innovative teams, we push the boundaries of what's possible to deliver advanced technologies with mission-critical applications. Our commitment doesn't end with academic research or proof-of-concept experiments; we measure our success by the real-world impact of our deployed solutions. Inspired by Arthur C. Clarke's vision — "Any sufficiently advanced technology is indistinguishable from magic" — we aim to achieve groundbreaking results in path planning, route optimization, and autonomous mission execution at the command and control layer

As C2 capabilities move from prototype to fielded, safety-critical operational systems supporting the Army, Navy, Air Force, and Missile Defense Agencies, we need a Systems Safety Engineer who can ensure our software-defined, AI-enabled decision-making systems are demonstrably safe, rigorously validated, and defensible to our government customers.

About the Job

We are looking to hire a Systems Safety Engineer to join our rapidly growing team in Broomfield, CO. The Battlespace Awareness team develops tactical sense- and decision-making software that provides advanced capabilities for Anduril's command and control (C2) products. This software must work with various combinations of compute hardware, connected sensor/effector hardware, and supporting software services. It must be effective, robust, and safe across various configurations, mission sets, and customer experiences.

Because our C2 products issue tasking to kinetic and non-kinetic effectors, integrate with autonomous platforms, and operate in human-on-the-loop and human-in-the-loop decision cycles, safety is a first-class engineering discipline, not a downstream compliance check. We need a Systems Safety Engineer who can own end-to-end safety assurance: from requirements decomposition and hazard analysis through software performance characterization, validation against government standards, and evidence packages that hold up under customer, regulatory, and legal scrutiny.

What You'll Do

• Own systems safety end-to-end for C2 software and its interfaces to sensors, effectors, and autonomous platforms — identify and solve problems between the seams and push through to reach desired outcomes
• Lead safety requirements gathering, decomposition, and traceability across cross-functional teams, translating mission-, system-, and government-level requirements into subsystem-level functional, performance, and safety specifications. Define success in the face of ambiguity
• Validate that our systems are safe — architect and execute performance-characterization campaigns for safety-critical software behaviors (classification, sensor/effector management, threat forecasting, autonomous tasking) using both simulated data and field-testing data
• Apply industry and government safety standards rigorously — including MIL-STD-882E (DoD System Safety) and adjacent frameworks, where relevant.
• Conduct and document safety analyses: Functional Hazard Analysis (FHA), Fault Tree Analysis (FTA), Failure Modes & Effects Analysis (FMEA/FMECA), Preliminary Hazard Analysis (PHA), System Safety Assessment (SSA), and Common Cause Analysis (CCA).
• Characterize software-driven performance for safety — quantify false-track rates, misclassification consequences, latency-under-load, degraded-mode behavior, and human-machine teaming failure modes; translate results into risk assessments and mitigation strategies that protect the warfighter and limit liability exposure to Anduril.
• Validate compliance with government requirements — partner with program offices (Army, MDA, Air Force, Navy) to establish means of compliance, author certification and verification artifacts, and represent Anduril at safety review boards and design reviews (SRR, PDR, CDR, TRR).
• Develop test plans, acceptance criteria, and analysis tools to evaluate system safety and performance; use data-driven analysis to verify customer safety requirements are met, and create artifacts to trace safety performance as the system evolves
• Integrate safety up front into the development lifecycle — not as a side group, but as a discipline embedded with algorithm engineers, software engineers, and product teams; build lightweight, high-velocity safety processes that match Anduril's product cadence without compromising rigor.
• Develop and implement modeling and simulation frameworks to validate safety-critical algorithmic performance, test system behavior under nominal and adversarial scenarios, and provide data-driven insights for continuous safety improvement

Required Qualifications

• 5+ years of systems safety, systems engineering, or safety-critical software engineering experience. Degree in Engineering, Physics, Computer Science, Mathematics, or a related field
• Demonstrated application of MIL-STD-882 (preferably 882E) across a defense program lifecycle — including hazard tracking, risk assessment codes, and closure of safety-significant items.
• Hands-on experience performing Fault Tree Analysis (FTA) and at least two of: FHA, FMEA/FMECA, PHA, SSA, CCA — with artifacts you can walk us through.
• Requirements engineering fluency — decomposition, traceability, and verification/validation. Comfortable translating vague customer intent into testable safety requirements
• Experience validating that safety and performance requirements are actually met — through analysis, simulation, HITL/SITL, and field testing
• Familiarity with government/customer requirements processes and ability to engage credibly with DoD program offices, safety review boards, and regulatory authorities on means of compliance and certification basis
• Proficiency with Python (and/or MATLAB) for data parsing, modeling & simulation, data analysis, and visualization of safety and performance evidence
• Demonstrated experience collaborating across cross-functional teams and communicating complex technical findings clearly to developers, system leads, and customers
• Comfortable working with ambiguity, evolving priorities, and challenging problems
• Must be authorized to work in the United States
• Up to 25% travel to customer sites and test events

Preferred Qualifications

• Experience applying MIL-STD-882 to software-intensive or AI/ML-enabled systems (software safety, autonomy assurance, algorithmic risk)
• Prior systems safety work on C2, battle management, air & missile defense, counter-UAS, or autonomous systems programs
• Familiarity with MBSE using e.g. AFSIM, and confident applying Monte Carlo analysis
• Familiarity with Linux OS and comfort obtaining data from software platforms using command-line tools
• Familiarity with processes and constraints for real-time and safety-critical software
• Working knowledge of C/C++ or Rust — coding full-time is not required, but understanding is valuable; our C2 stack uses Rust, C++, Python, etc.
• Understanding of the full software development lifecycle, CI/CD, and modern software safety practice (safety cases, assurance arguments, GSN)
• Previous experience in a defense, aerospace, or naval environment
• Experience with any of the following: radar, tracking systems, sensor fusion, distributed systems, autonomous systems, ML/AI systems