The opportunity
Platform Security Engineering (PSE) sits within Data Center Security Engineering (DCSE). As Anthropic expands beyond traditional cloud providers into owned facilities, colocation, and partner sites, we take on the security responsibilities that cloud providers used to abstract…
What you'll do
Lead and grow the platform security engineering group: hiring, onboarding, development, performance, and prioritization for full-time engineers, and coordination of contractor and vendor engineers working alongside them
Own the platform security roadmap and its delivery: hardware root of trust and attestation, secure and measured boot across CPU, BMC, accelerator, and peripheral firmware, OS and kernel hardening, and the host-side pipeline that turns attestation evidence into production gates
Own the firmware supply chain posture for the fleet: SBOM and reference integrity manifests, authenticated update, rollback protection, and the vendor relationships needed to get fixes shipped
Drive platform risk assessments for new compute platforms and providers, and: make evidence-based go/no-go recommendations with bounded risk rather than perfect-or-nothing gates
Partner with infrastructure, fleet, compute, and detection and response teams: so that platform controls land in production without degrading training or inference performance
Manage relationships with silicon vendors, OEMs, and compute providers: security requirements, vulnerability management, disclosure and remediation timelines, and upstream and standards-body engagement (TCG, OCP, IETF)
What they're looking for
- Experience managing a mixed team of full-time engineers, contractors, and: vendor engineers while keeping design authority in-house
- Hands-on background in OpenBMC or other server management firmware, DRTM or: secure launch, or confidential computing primitives (TDX, SEV-SNP, ARM CCA)
- A record of upstream contributions or maintainership in Linux, OpenBMC, or a: comparable community, or standing in TCG, UEFI Forum, or OCP
- Experience securing large-scale HPC or AI training infrastructure
- Firmware vulnerability research, reverse engineering, or fuzzing background
- Experience running coordinated vulnerability disclosure with hardware or firmware vendors
