The opportunity
Claude is trained and served on hardware in data centers Anthropic operates and in sites partners build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it.
What you'll do
Security domains, end to end: own one or more of physical security at partner-operated and Anthropic-operated sites, hardware supply chain and chain of custody, media protection and sanitization, personnel security and site access, third-party and vendor security assessment, and maintenance and contingency controls
Tools, automation and AI agents: build the internal tools, automation and agents the team runs on: evidence collection, access reviews, asset and custody tracking, partner intake. When a process keeps costing people time, you build the tool that retires it
Security review for new sites, leases and vendors: find the gaps in the design, the contract and the operator's procedures, write the security terms and exhibits, and verify the fixes after signing
Requirements and procedures as code: write requirements and procedures that a partner can build to and an assessor can test, kept as code in a version-controlled repository
Site and supplier assessment: assess sites and suppliers against those requirements, on site and from evidence; document deviations and engineer the compensating control where a requirement can't be met as written
Continuous compliance evidence: tie controls to the compliance frameworks we and our partners are assessed against, with evidence always current so an assessment pulls from it directly
What they're looking for
- Experience across several of the domains above rather than one
- Experience at sites you did not fully control: cloud, colocation or GPU cloud operators
- Experience with federal assessment regimes based on NIST SP 800-53, including: supply chain (NIST SP 800-161) and media sanitization (NIST SP 800-88) guidance; have produced evidence an assessor accepted
- Have built governance, risk and compliance (GRC) or evidence automation: automated control checks, asset or custody tracking, questionnaire and assessment pipelines, docs-as-code workflows
- Have run incident response at physical sites: alarms, investigations, after-action fixes
- Have worked in live data halls and on active construction sites, and can follow a method of procedure
- Experience redlining contract security language with legal and procurement counterparts
- Experience with international sites: per-country personnel screening and staffing restrictions, data residency, and export controls on hardware
