About the Role

The IT Operations team keeps Anthropic running — we make sure every employee can do their best work without friction. We're seeking an IT Support Engineer who combines deep technical skills with a genuine service mindset and sound judgment.

Anthropic is growing fast, and our IT operations need to keep pace. That means onboarding at scale, automating repetitive processes (including with Claude), and continuously improving the employee experience. You'll handle support challenges across our primarily macOS environment while contributing to the operational improvements that help us scale. You'll work closely with IT Engineering and Security, with opportunities to grow into more technical infrastructure work over time.

Responsibilities

End-User Support

• Triage and resolve issues across hardware, software, networking, and accounts — primarily through our ticketing system, with additional support via Slack and in-person
• Diagnose and resolve issues across macOS, ChromeOS, iOS, Android, and our core SaaS platforms (Google Workspace, Slack, GitHub, Atlassian)
• Troubleshoot device issues, including enrollment, configuration profiles, and policy enforcement
• Support access management and employee lifecycle workflows (onboarding, offboarding, reorgs)
• Handle escalations requiring cross-team coordination
• Participate in an on-call rotation for urgent issues outside business hours
• Provide hands-on support for user technology, AV systems, conference rooms, and printers

Communication & Documentation

• Communicate clearly with users of all technical levels
• Write and maintain internal documentation including runbooks, how-to guides, and knowledge base articles
• Identify patterns in support requests, surface recurring issues to the team, and identify opportunities for automation or systemic solves

Operational Improvement

• Help streamline onboarding and other high-volume operations as the company scales
• Contribute to automation efforts
• Maintain and improve device management, identity, and access systems
• Assist with scripting (Bash, Python) to automate repetitive tasks

You may be a good fit if you

• Have 5-7+ years of hands-on IT support experience, ideally in a fast-paced or high-growth environment
• Are an excellent communicator who genuinely enjoys helping people solve problems
• Have strong troubleshooting skills and are methodical, curious, and persistent
• Demonstrated supporting macOS endpoints and comfortable supporting ChromeOS, iOS, and Android
• Have significant experience with Google Workspace administration
• Have experience with Slack administration — workspace management, permissions, and troubleshooting
• Have substantial experience supporting and administering additional SaaS tools
• Understand identity and access fundamentals — SSO, MFA, directory services
• Are familiar with MDM fundamentals and endpoint management concepts
• Have experience with basic scripting (Bash or Python) for automation
• Take ownership of problems and follow through until they're resolved
• Think beyond the immediate fix — you ask "why did this happen?" and "how do we prevent it?"
• Are organized enough to manage competing priorities without things falling through the cracks
• Propose solutions when you see a process that doesn't scale
• Are looking to develop deeper technical skills and take on more complex systems administration challenges over time

Strong candidates may also

• Be familiar with zero-trust security concepts and endpoint security tooling
• Have experience with networking basics — DNS, DHCP, VPNs, networking fundamentals
• Have contributed to IT projects beyond day-to-day support (migrations, tool rollouts, process redesigns)
• Have experience using AI tools to improve personal or team productivity

Location

This role is based in our Dublin office. There is a 5 day per week in office expectation.

What Makes This Role Unique

You'll be joining a high-impact IT team supporting some of the world's leading AI researchers and engineers. The pace is fast and you'll have real ownership over your work. This isn't a role where you follow rigid scripts — you'll be trusted to use your judgment, improve our processes, and grow with the team. Because we're scaling rapidly, you'll have meaningful opportunities to shape how IT operations work at Anthropic.

Deadline to apply: None. Applications will be reviewed on a rolling basis.

About the role

Anthropic’s mission requires the ability to defend our compute resources against all types of adversaries. Meeting that bar requires more than trustworthy hardware, it requires a software stack to consume the trust primitives the platform produces: device identities, attestation evidence, integrity manifests, DICE chains, topology claims, debug-state assertions, encryption posture, etc.

This role makes sure that all the security-relevant system state that needs to be attested to is properly accounted for in a robust and comprehensive manner, and used appropriately for authorization decisions in production.

Key responsibilities

You will be the technical owner of Anthropic's platform trust integration surface, the host-side stack that ingests trust primitives produced by hardware and converts them into production gates for workloads. Concretely:

• Attestation verification pipeline. Consume trusted reference integrity manifests for every component in the TCB. Validate measurements end-to-end, surface drift, and gate workload placement on attestation outcomes.
• DICE chain consumption. Integrate with iRoT-rooted DICE chains where exposed, and define what Anthropic requires of partners where they aren't yet.
• Dynamic root-of-trust and late-launch integration. Working with other security engineers to ensure Anthropic's host software stack securely leverages DRTM primitives, and work with silicon vendors and firmware maintainers to address gaps in relevant technologies.
• Interconnect topology validation. Build the tooling to validate interconnect topology claims for multi-node workloads and catch deviations before they reach production.
• CPU and interconnect encryption posture. Validate that CPU and interconnect encryption are enabled and attestable on a given system; own Anthropic's position on performance tradeoffs and multi-node attestation integration work.
• Debug-disable verification. Define automated mechanisms to prove hardware debug mechanisms are disabled in production.
• Ensure devices/peripherals are appropriately covered. Accelerators are an essential component of AI workloads. We must ensure that platform trust extends to all relevant components, and the channels between them, too.

This is an IC engineering role not a PM role. You will write code, own services, and be accountable for the correctness of Anthropic's platform trust pipeline in production. You'll operate at the interface between Platform Security Engineering and the rest of Anthropic.

Minimum qualifications

• Deep systems software engineering experience with kernel, firmware, or low-level platform code.
• Understanding of hardware as encountered in modern server platforms, and implications of trust relationships within.
• Working knowledge of modern attestation primitives: RoTs, TPMs, DICE, SPDM, measured boot, DRTM across major CPU architectures, reference integrity manifest best practices, remote attestation protocols and design patterns.
• Ability to read vendor documentation critically and identify gaps between what the spec claims and what can actually be relied on in production.
• Strong ownership disposition: comfortable being the one accountable for a capability landing, including when it requires pushing partners.
• Supply-chain attestation work (SPDM, TCG provenance, pre-delivery identity bootstrapping beyond TOFU).
• Familiarity with relevant standards from TCG (TPM, DICE, etc.), IETF (RATS WG, SEAT WG, etc.), DMTF (SPDM, etc.), etc.
• History of shipping security-critical code in production at scale.

About the role:

Deadline to apply: None. Applications will be reviewed on a rolling basis.

About that Role

As part of the Anthropic security department, the compliance team owns understanding security and AI safety expectations, as established by regulators, customers, and (nascent) industry norms — which we also seek to influence. The compliance team uses this understanding to provide direction to internal partners on the priorities of security and safety requirements they must meet. The compliance team demonstrates adherence to security expectations through credential attainment, the establishment of assurance and oversight mechanisms, and direct engagement with auditors, customers, and partners.

This opportunity is unique. Anthropic is expanding HIPAA coverage across its product portfolio — including Claude Code, the Claude Developer Platform, and Claude Cowork — and we need to build the compliance infrastructure to match that expansion. We are looking for someone to own HIPAA compliance operations end-to-end, not just advise on it.

Responsibilities:

• Operate Anthropic’s HIPAA compliance review program, executing on HIPAA obligations across the product portfolio.
• Run a dedicated HIPAA review track in parallel with the Product Security Review (PSR) process, applying compliance checklist to every in-scope change and recording a complete, auditable disposition before release.
• Build and maintain change monitoring mechanisms to catch HIPAA-relevant changes — including default setting changes and incremental updates.
• Partner with product and engineering teams upstream to ensure HIPAA considerations are built into first releases rather than addressed as post-launch remediations.
• Assess and document PHI data flows, infrastructure boundaries, and control coverage across Anthropic’s cloud-native product environments.
• Write, update, and enact HIPAA policies, checklists, deployment guides, and audit evidence packages.
• Manage Business Associate Agreement (BAA) obligations and coordinate with legal and external counsel on PHI determination questions and emerging regulatory requirements.
• Contribute to Anthropic’s broader compliance program, including adjacent frameworks (SOC 2, ISO 27001, NIST 800-53) where they intersect with HIPAA obligations.

You may be a good fit if you:

• Have 3+ years of progressive experience in compliance roles, including direct ownership of a HIPAA compliance program at a technology company
• Have evaluated PHI data flows and infrastructure boundaries in cloud-native environments (AWS, GCP, or Azure) and can assess HIPAA exposure without always needing to escalate to legal
• Have designed and operated a compliance review mechanism integrated into a product development or release process
• Can translate HIPAA technical compliance requirements into actionable workstreams for engineering and product teams
• Deliver clear, precise compliance documentation — policies, checklists, audit evidence, deployment guides — for both technical and non-technical audiences
• Thrive in fast-paced, ambiguous environments where you’re expected to build processes from scratch and keep them working under rapid product change
• Are energized by being the organizational expert who educates and influences rather than only advises

Strong candidates may also:

• Have worked in AI/ML or developer-platform companies and understand the unique challenges of PHI exposure in model inference and API environments
• Have HITRUST CSF experience or experience mapping HIPAA requirements to HITRUST controls
• Bring experience from high-growth technology companies where compliance programs had to scale alongside rapid product expansion
• Have implemented or significantly contributed to compliance automation or GRC tooling integrations
• Possess relevant certifications (CHPC, HCISPP, CISA, CISM, CISSP, or equivalent)

Candidates need not have:

• Done everything on this list before — we value learning agility and willingness to tackle novel compliance challenges in the AI space

Deadline to Apply: None, applications will be received on a rolling basis.

About the Role

We are seeking a GRC Automation Lead to join our GRC organization and build the technical foundation for how we scale our risk and compliance programs. In this role, you will lead the team that designs and implements automated workflows, data pipelines, and integrations that transform manual compliance processes into scalable engineering systems. 

This is a greenfield opportunity to establish the team, architecture, and integrations that will define how we approach governance, risk, and compliance at Anthropic. The core challenge is a data problem: compliance information lives across dozens of systems—cloud infrastructure, identity providers, HR platforms, ticketing tools, code repositories—and your job is to design systems that bring it together, normalize it, and make it actionable. Success in this role comes from understanding how systems connect and how data flows between them, not from writing code yourself.

At Anthropic, you'll also have a unique advantage: the ability to design AI-powered workflows where Claude acts as an extension of your team, handling tasks that would traditionally require additional headcount or manual effort. You'll need ingenuity to identify where agentic AI can accelerate evidence collection, interpret unstructured data, triage compliance gaps, and augment human judgment in risk assessments. Working closely with Security, IT, and Engineering teams, you'll translate compliance and regulatory requirements into solutions that support audit programs including SOC 2, ISO, HIPAA, and FedRAMP, building systems that combine traditional automation with AI capabilities to achieve scale that wouldn't otherwise be possible.

Responsibilities: 

• Lead the team that establishes foundational GRC processes and architecture. Design and build automated workflows for risk management and compliance, creating scalable systems that enable continuous monitoring as Anthropic grows.
• Build data pipelines that aggregate risk, control, and asset information from across our technology stack. This means solving hard data integration problems: mapping disparate schemas, handling inconsistent data quality, and creating unified views of compliance posture through dashboards and reporting tools.
• Inform GRC platform strategy and implementation: in partnership with other programs, evaluate, select, and deploy tooling that meets our compliance requirements.
• Translate written policies and compliance requirements into policy-as-code—working with Engineering and Security teams to express requirements as enforceable rules, automated checks, and continuous validation rather than static documents.
• Establish feedback loops between policy and implementation: surface where technical controls diverge from written requirements, identify where policies need to evolve based on infrastructure realities, and ensure that compliance requirements are expressed in terms engineers can act on.
• Design and deploy agentic AI workflows that extend team capacity, using Claude to serve as a virtual GRC analyst to automate evidence analysis, monitor control effectiveness, draft audit responses, interpret policy documents, and handle other tasks that require reasoning over unstructured information.
• Design and maintain integrations connecting GRC tooling with cloud infrastructure, identity management systems, HRIS platforms, ticketing systems, version control, and CI/CD pipelines—working with engineers to implement integrations that enable automated evidence collection and continuous compliance validation.
• Build and lead an AI-forward GRC engineering function as we scale: hiring team members, establishing practices, and defining the technical roadmap for governance and compliance automation at Anthropic.

You may be a good fit if you:

• Have 12+ years of total experience and 3-4+ years of experience managing technical individual contributors or systems-focused teams, with a proven track record of building or scaling small teams (2-5 people) in security, compliance, automation, or operations functions.
• Are a systems thinker first. You understand how complex environments work: how data flows between systems, where integration points exist, what breaks when systems don't talk to each other. Your strength is designing the right architecture and environment for security monitoring, not necessarily implementing it yourself.
• Have 5+ years of experience designing automated workflows, data pipelines, or system integrations, whether through traditional development, low-code platforms, GRC tools, or process automation. We care about your ability to solve integration problems more than your programming language proficiency.
• Have a relentless focus on data integration: you understand how to pull data from multiple sources, normalize it, join it meaningfully, and surface insights. You're comfortable reasoning about messy, inconsistent data and designing systems that handle edge cases gracefully.
• Understand APIs and integration patterns: REST APIs, webhooks, authentication flows, polling vs. push architectures, and can evaluate systems based on how well they expose data and support automation.
• Can work independently with minimal guidance, taking ownership of complex problems from design through implementation while managing ambiguity inherent in early-stage programs.
• Have strong analytical and problem-solving skills with attention to detail necessary for compliance work, balanced with pragmatism about risk-based prioritization in fast-paced environments.

Strong candidates may have:

• Experience designing or implementing AI-powered automation, agentic workflows, or LLM-based tooling in operational contexts.
• Experience with GRC platforms such as ServiceNow GRC, Vanta, Drata, OneTrust, RSA Archer, or similar tools including configuration, customization, and integration capabilities
• Familiarity with scripting languages (Python or similar) for automation tasks, API interactions, and data transformation.
• Prior experience in high-growth startup environments demonstrating ability to build scalable processes and adapt quickly to changing requirements and priorities
• Familiarity with Infrastructure as Code tools (Terraform, CloudFormation, Ansible) and DevSecOps practices including CI/CD pipeline integration and policy-as-code implementations.
• Familiarity with cloud platforms (AWS, GCP, Azure) and an understanding of how compliance-relevant data can be extracted from their APIs and logging systems.

Deadline to apply: None, applications will be received on a rolling basis.

About the role

As Anthropic's Lead for Data Center Security Operations in North America, you will own the physical security program across our NA data center footprint — spanning owned sites and colocation partners. You will partner closely with data center build and operations teams from the earliest design conversations through commissioning and into steady-state operations, shaping the security posture that protects some of the most consequential AI compute in the industry.

This role is hands-on and strategic at the same time. You'll be on-site when it matters, author the policies and standards that govern the region, run the vendor and guard-force relationships that keep our sites secure day-to-day, and lead incident response when something happens. You'll also be one of the primary regional voices shaping how security integrates with infrastructure, compute, real estate, and legal partners as Anthropic scales.

You will join a growing Data Center Security Engineering function that is still in build mode. The work is ambiguous, fast-moving, and changes as strategy changes. We need someone who can set direction without waiting for mature playbooks, and who treats security as an enabler of business outcomes.

Responsibilities

You will own a region of North America data center security operations program across owned and colocation sites. 

• You'll partner with data center build and engineering teams on new-site design and activation, ensuring security scope is defined, delivered, and turned over to operations cleanly. 
• You'll lead the regional vendor portfolio such as integrators, guard-force providers, and general contractors with meaningful budget and SLA ownership. 
• You'll author and maintain the policies, standards, and SOPs that govern physical security in the region, keeping them aligned with company-wide frameworks. 
• You'll lead physical security incident response and investigations, and you'll represent the region in cross-functional forums that shape infrastructure, compute, and real estate decisions. 

You may be a good fit if you

• Have extensive experience operating physical security at hyperscale or at a major colocation operator across multiple sites, with direct ownership of the operating model, vendors, and on-call.
• Have personally led the security scope on new-build data center projects from design through construction, commissioning, and turnover to operations.
• Have worked across both owned data centers and colocation space, and understand how the operator/tenant dynamic changes your controls, vendors, and incident response.
• Can author physical security policies, standards, and SOPs that get adopted and followed.  
• Drive security outcomes through cross-functional partners (infrastructure, construction, real estate, compliance, legal) by shaping decisions, not by blocking them.
• Manage a real vendor portfolio, integrators, guard force, general contractors with SLAs, budget, and performance accountability.
• Adapt well when design and strategy shift mid-stream and can re-scope a program without losing momentum.
• Calibrate security to business reality can explain when you chose not to apply a control and why.

Strong candidates may have

• CPP (Certified Protection Professional) or PSP (Physical Security Professional) certification.
• Experience standing up a data center security function from 0→1 (not just running an established one).
• Background in a regulated environment, critical infrastructure, financial services, federal/defense, or similar.
• Direct experience leading an external audit or customer security review of data center physical controls.

Strong candidates need not have

• A specific university, credential, or prior employer. We care about what you've built and operated, not where.
• Prior people-management experience, this role is an IC lead today. If you've led matrixed or virtual teams, that's enough.
• Experience in AI or machine learning infrastructure specifically we'll teach you how our workloads shape the security posture.

Deadline to apply: None. Applications will be received on a rolling basis.

About the Role: 

Anthropic sits at the frontier of AI development, which makes us one of the most interesting targets in the world for nation-state and advanced criminal actors. The Threat Intelligence function within our Detection & Response team exists to make sure we see them coming. As a Threat Intelligence Engineer, you'll be a hands-on practitioner responsible for producing the actionable intelligence that drives our detections, hunts, and defensive priorities. You'll track the adversaries most likely to target a frontier AI lab, build the tooling and pipelines that turn raw indicators into operational defenses, and work shoulder-to-shoulder with detection engineers and incident responders to make sure intelligence actually changes outcomes. This is a builder's role on a small, high-leverage team — you'll have broad latitude to shape how threat intelligence is collected, analyzed, and operationalized at Anthropic. 

Responsibilities: 

• Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the broader technology sector — producing timely, actionable intelligence for Security Engineering stakeholders
• Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise into our detection and alerting stack
• Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, and turn findings into durable detections
• Perform technical analysis of malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals
• Partner with Detection Engineering and Incident Response to translate intelligence into detection rules, hunting hypotheses, and incident context in near-real-time
• Curate and triage inbound intelligence from commercial feeds, open source, government, and trusted peer relationships — prioritizing what matters for Anthropic's threat model
• Contribute to threat models and risk assessments that inform security architecture and defensive investment across the enterprise
• Build and maintain external intelligence-sharing relationships with peer companies, ISACs, and government partners

You may be a good fit if you:

• Have 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis at an organization facing sophisticated adversaries
• Have deep, demonstrable knowledge of specific nation-state or advanced criminal threat actors — their tooling, infrastructure patterns, tradecraft, and targeting
• Are a strong engineer: you write production-quality Python (or similar), have built automation and data pipelines, and don't need to hand requirements to someone else to get tooling built
• Are comfortable performing malware analysis, infrastructure analysis (passive DNS, certificate pivoting, netflow), and log analysis to develop and validate your own findings
• Have experience authoring detection logic (YARA, Sigma, Snort/Suricata, or SIEM-native queries) and understand what makes a detection durable vs. brittle
• Can write clearly and concisely — your intelligence products are read and acted on, not filed away
• Have an existing network in the threat intelligence community and a track record of productive bidirectional sharing

Strong candidates may have:

• Experience defending cloud-native and research-heavy environments (AWS/GCP, Kubernetes, ML infrastructure, developer tooling and supply chain)
• Prior work operating in a threat intelligence role tracking sophisticated or state-sponsored adversaries, where your analysis directly informed detection, threat hunting, and incident response
• Experience applying LLMs or other AI tooling to accelerate intelligence collection, enrichment, and analysis
• Public research, conference talks, or open-source tooling contributions in the CTI space

Deadline to apply: None. Applications will be received on a rolling basis.

About the role

Anthropic’s Global Safety, Intelligence, and Security (GSIS) team is responsible for protecting our people, facilities, and operations worldwide. The function spans intelligence, executive protection, investigations, travel and event security, security technology, security operations, environmental health and safety, and crisis management — and it’s growing quickly as Anthropic’s footprint, public profile, and threat surface all expand.

We’re looking for a senior operational leader to own the day-to-day resilience of every Anthropic location worldwide. Reporting to the Head of GSIS, you’ll lead three tightly connected functions — physical security operations, environmental health and safety, and event security — across a global office portfolio that includes specialized environments such as research labs. You’ll manage a growing team of practitioners and an existing EHS program, and you’ll be the person leadership turns to when something needs to be safe, secure, and operational, every day, in every location.

This is an unapologetically operational role. You’ll set the standards, run the programs, manage the vendors, own the metrics, and answer for outcomes when something goes wrong at 2am in a different time zone. You’ll partner closely with Real Estate and Workplace, People, Legal, IT, and the rest of the GSIS leadership team — and you’ll work alongside the Head of Protective Services on high-profile events where the threat picture and the operational footprint converge. The right person is equally comfortable writing an OSHA-compliant program from scratch, walking a new office build with a contractor, briefing an executive on event-day security posture, and coaching a guard force supervisor through an incident debrief.

Responsibilities

Lead global physical security operations

• Own physical security strategy, standards, and execution across all Anthropic offices globally — including access control, intrusion detection, visitor management, guard force operations, and after-hours response
• Manage the contract guard force vendors end-to-end: selection, SLAs, performance management, and renewal — holding partners to a standard worthy of the company they’re protecting
• Build and maintain global physical security standards that scale with new office openings, ensuring consistency without ignoring the realities of local jurisdictions, building stock, and threat environments
• Partner with Real Estate and Workplace on new site selection, build-outs, and retrofits to ensure security and life-safety requirements are designed in, not bolted on
• Own incident response for physical security events and lead after-action reviews that drive concrete program improvements

Run a true Environmental Health and Safety program

• Lead Anthropic’s global EHS program, ensuring compliance with OSHA and equivalent international workplace safety regulations across all locations
• Oversee EHS for specialized environments including research labs — covering hazard assessment, chemical hygiene where applicable, ergonomics, emergency action plans, and incident reporting and investigation
• Manage and develop the existing EHS program, and grow the function as the company’s footprint expands
• Own workplace safety training, recordkeeping, and the evidence base needed for audits, insurance renewals, and regulatory inquiries

Own event security globally

• Lead security planning and execution for major Anthropic events — both internal (all-hands, offsites, milestone gatherings) and external-facing (launches, recruiting events, public-facing convenings)
• Partner closely with the Protective Services team on events involving senior leadership or elevated threat profiles, ensuring clean handoffs and unified command
• Build a repeatable event security operating model — site surveys, threat assessments, staffing plans, communications protocols, run-of-show integration — so every event clears the same bar without reinventing the playbook
• Manage event security vendors and contracted staff across regions

Lead and grow the team

• Manage a growing team of physical security, EHS, and event security professionals — hiring, developing, and retaining practitioners who can operate independently across regions and time zones
• Set performance expectations, run a real operating cadence, and create the kind of team where people want to build careers
• Sit on the GSIS leadership team alongside peers leading Intelligence/Investigations/Insider Risk, Protective Services, Public Sector Security, and other pillars — contributing to overall function strategy and cross-pillar initiatives

You may be a good fit if you

• Have 15 years of relevant experience
• Have substantial leadership experience running physical security operations at a multi-site or global organization, with direct accountability for outcomes — not just oversight
• Have owned or directly managed an OSHA-regulated EHS program, including for specialized environments such as labs, R&D facilities, or similar
• Have led security planning and execution for major events, including external-facing events with elevated visibility or threat profiles
• Have managed contract guard forces at scale and know how to get real performance out of a vendor relationship
• Are an experienced people manager who has built and developed teams of security and safety practitioners
• Bring strong judgment under pressure — you can make the right call when information is incomplete and the clock is running
• Write and communicate clearly across audiences, from frontline officers to executive leadership
• Care about Anthropic’s mission and the unique resilience considerations that come with building frontier AI systems

Strong candidates may also

• Hold relevant credentials such as CSP, ASP, CHMM, CPP, PSP, or equivalent
• Have worked at a high-growth technology company, frontier research organization, or similarly high-scrutiny environment
• Have stood up physical security or EHS programs in new offices or new countries from the ground up
• Have direct experience with lab safety, chemical hygiene plans, or research environment EHS
• Have led security operations during a significant incident, crisis, or sustained threat event
• Have managed third-party security and EHS providers across multiple regions and regulatory regimes

Logistics

• This is a hybrid role and can be based near any Anthropic office
• Approximately 25% travel expected to support global operations, site assessments, and major events

This role is for operators who take pride in the unglamorous work of keeping people safe and operations running — if you want ownership, scope, and a team worth building, we’d like to meet you.

Deadline to apply: None. Applications will be received on a rolling basis.

About the role

Anthropic's Detection Platform team is building the next-generation Linux endpoint security system that protects our AI research and production infrastructure. We're looking for a senior engineer to architect and implement node-layer security sensors, develop kernel-based detection systems for ML workloads, and build tooling that leverages Claude to transform how security operations work.

This is a high-ownership role on a small team. You'll design systems that run across our rapidly growing fleet with minimal performance overhead, partner closely with security and infrastructure engineers, and help shape the technical direction of endpoint detection at Anthropic.

Key responsibilities

• Build kernel-level security detections for our AI platform, including eBPF-based sensors for Linux endpoints
• Design and implement scalable data pipelines for ingesting and processing security telemetry across our infrastructure
• Architect monitoring solutions for production systems that minimize performance impact on ML workloads
• Prototype new security tooling and analytics capabilities, including applications of Claude to detection and response workflows
• Partner with security and infrastructure teams to translate requirements into reliable, maintainable systems
• Contribute to the growth of the Security team through code reviews, mentorship, and hiring
• Participate in an on-call rotation

Minimum qualifications

• Background in software engineering with a focus on security, infrastructure, Linux internals, and/or operating systems
• Ability to write maintainable and secure code in Rust and/or C/C++
• Strong understanding of operating system internals and OS security primitives
• Experience with test-driven development and CI/CD workflows
• Experience partnering with security teams to translate requirements into technical solutions
• Track record of leading technical projects with minimal guidance and bringing clarity to ambiguous problems

Preferred qualifications

• 7+ years of software engineering experience, with significant time spent on security, infrastructure, or operating systems work
• Direct experience with eBPF and kernel-level instrumentation
• Experience with detection-as-code workflows
• Experience with infrastructure-as-code tools such as Terraform or CloudFormation
• Background building security tooling from the ground up
• Experience implementing security monitoring solutions (SIEM, log aggregation, EDR)
• Background in detection engineering or security operations
• Experience with SOAR platform or security automation development
• Experience with data lake and database architecture, or query optimization over large datasets
• Experience with API design and internal platform development
• Track record of applying ML or AI to security problems
• Experience scaling security operations in a high-growth environment
• Experience contributing to hiring, mentorship, and engineering culture on a security team

About the Role: 

We’re looking for a Security Engineering Lead to own and drive Anthropic’s Corporate Security program. This is a player-coach Tech Lead Manager (TLM) role: you’ll be both the most senior technical individual contributor on corporate security and the people leader for a lean, high-impact team of Security Engineers. You will set the technical direction, write code and ship tooling alongside your team, and build the culture and processes that allow the team to scale.

Corporate Security at Anthropic encompasses everything that protects our people, endpoints, networks, SaaS ecosystem, and corporate data—the full surface area outside of production infrastructure. The scope is broad and the team is deliberately small, which means you’ll need deep technical skills across multiple domains, strong judgment about where to invest, and a bias toward automation and engineering-driven solutions over manual process.

You’ll report into Security leadership and partner closely with IT, Infrastructure Security, Detection & Response, and GRC teams. This role is high-visibility and high-autonomy: you’ll be expected to define the roadmap, make architectural decisions, and represent Corporate Security across the company.

Responsibilities: 

Technical Leadership & Hands-on Engineering

• Own the security architecture, tooling, and controls for Anthropic’s corporate environment end-to-end, including endpoint fleets (macOS, Windows, ChromeOS), campus and office networks, SaaS applications, mobile devices
• Design, build, and ship security automation, integrations, and internal tooling—including leveraging Claude and LLMs to accelerate security workflows
• Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms
• Define what it means to operate safely in an environment where AI agents act more like humans than actual humans
• Evaluate, determine, deploy, and operate corporate security tools (EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security, etc.)
• Drive vulnerability management for corporate assets, including patch orchestration, risk-based prioritization, and exception management
• Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects

People Leadership & Team Building

• Manage, mentor, and grow a purposefully lean team of Security Engineers; set clear expectations, run effective 1:1s, and create an environment where engineers do the best work of their careers
• Hire and build the team as scope expands—own the hiring bar and pipeline for Corporate Security Engineering roles
• Balance your own IC contributions with the team’s needs; know when to go deep on a problem yourself and when to delegate and coach
• Foster a culture of operational excellence, blameless incident review, and continuous improvement

Strategy & Cross-Functional Partnership

• Define and own the Corporate Security roadmap, aligning investments to Anthropic’s risk profile and growth trajectory
• Partner with IT Operations to ensure security is embedded in endpoint provisioning, network design, and SaaS lifecycle management
• Collaborate with Detection & Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events
• Partner with Infrastructure and Security Engineering teams to ensure security standards are consistent across all of Anthropic
• Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively

You may be a good fit if you:

• Have 8+ years of Security Engineering experience in a corporate/enterprise security domain (endpoint security, network security, SaaS security, identity, or a combination)
• Have 2+ years of experience managing or tech-leading a team of engineers, with a demonstrated track record of developing talent and shipping results through others
• Are a strong engineer who still writes code regularly—you can prototype a tool, write a detection, build an integration, or debug a complex configuration issue
• Have deep experience with macOS fleet security (this is our primary platform) and solid working knowledge of Windows and ChromeOS security
• Have hands-on experience deploying and operating EDR/XDR, MDM, ZTNA/zero trust, and identity security solutions at scale
• Understand modern SaaS security challenges: shadow IT, OAuth token sprawl, data exfiltration paths, SaaS-to-SaaS integrations, and SSPM/CASB tooling
• Can work independently with high autonomy, manage ambiguity, and make sound risk-based prioritization decisions in a fast-paced environment
• Have excellent communication skills and can translate complex security topics into clear recommendations for technical and non-technical audiences

Strong candidates may have:

• Securing corporate environments at high-growth AI, cloud, or developer-tools companies 
• Maturing a Corporate Security function from early stage, including defining scope, selecting the initial toolset, and hiring the founding team
• Advanced macOS security (system extensions, endpoint security framework, MDM profile engineering, Declarative Device Management)
• Network security architecture for hybrid/multi-office environments, including SD-WAN, ZTNA, DNS security, and network segmentation
• Browser security and isolation technologies (e.g., Island, Talon/Palo Alto, Chrome Enterprise)
• Proficiency in Python, Go, or similar languages for building security tooling and automation
• Experience leveraging LLMs/AI to augment security operations, build investigative tooling, or automate policy enforcement
• Familiarity with IaC (Terraform), CI/CD pipelines, and DevSecOps practices as they apply to corporate infrastructure management
• Mobile security for iOS/Android in a BYOD and corporate-managed device environment
• Data Loss Prevention (DLP) program design and implementation across endpoints, email, SaaS, and cloud storage

Deadline to apply: None. Applications will be received on a rolling basis.

About the Role 

The Detection & Response (D&R) team plays a critical role in protecting our systems, users, and data from security threats. We’re looking for an experienced Technical Program Manager to own and evolve incident management within D&R. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from security and operational incidents.

You’ll be the driving force behind maturing and scaling our incident response lifecycle—from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented. 

You won’t just manage incidents—you’ll make sure we get meaningfully better after each one.

Responsibilities

• Own the end-to-end D&R incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for security incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders.
• Establish and run incident commander rotations within D&R, ensuring clear ownership and effective coordination during incidents of varying severity.
• Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams—ensuring follow-through on both tactical fixes and strategic improvements.
• Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable.
• Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms.
• Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization.
• Develop and maintain D&R incident response documentation, playbooks, runbooks, and training materials; keep them current as the threat landscape and our systems evolve.
• Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events.
• Define, develop, and track incident management KPIs and report regularly to D&R and Security leadership.
• Support broad cross-functional training and initiatives to uplevel security awareness across the company (e.g. Tabletop exercises, training, talks).

You may be a good fit if you:

• Have 7+ years of experience in technical program management, incident management, or security operations, with significant time spent in a detection & response or security incident response context.
• Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
• Have a demonstrated track record of turning incident data into organizational improvements—not just writing post-mortems, but driving the cross-functional work to implement systemic fixes.
• Are comfortable participating in on-call responsibilities and leading incident response during high-severity security events, including off-hours.
• Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist.
• Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop.
• Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
• Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations.
• Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
• Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information.

Responsibilities:

• Build AI-powered platform responsible for all aspects of D&R capabilities from detection development to incident response
• Design and implement scalable data pipelines for ingesting and processing security telemetry across our rapidly growing infrastructure
• Architect solutions for storing and efficiently querying large volumes of security-relevant data
• Create rapid prototypes and proof-of-concepts for new security tooling and analytics capabilities
• Work closely with security and infrastructure teams to understand requirements and deliver solutions
• Mentor engineers and contribute to hiring and growth of the Security team
• Participate in on-call shifts

You may be a good fit if you:

• 7+ years of experience in software engineering with a focus on security, infrastructure and/or data pipelines
• Track record of building and maintaining internal developer tools or security platforms
• Strong understanding of data processing pipelines and experience working with large-scale logging systems
• Experience with:
  • Test-driven software development and/or CI/CD (plus for direct experience with Detection-as-code workflows)
  • Infrastructure-as-code (Terraform, CloudFormation)
  • Query optimization for large datasets
• Experience with building stable and scalable services on cloud infrastructure and serverless architectures 
• Ability to write maintainable and secure code in Python
• Experience working with security teams and translating requirements into technical solutions
• Ability to lead technical projects with minimal guidance
• Track record of driving engineering excellence through high standards, constructive code reviews, and mentorship
• Proven ability to lead cross-functional security initiatives and navigate complex organizational dynamics
• Outstanding communication skills, translating technical concepts effectively across all organizational levels
• Demonstrated success in bringing clarity and ownership to ambiguous technical problems
• Strong systems thinking with ability to identify and mitigate risks in complex environments

Strong candidates may also have experience with:

• Experience building security tooling from the ground up
• Background in implementing security monitoring solutions (SIEM, log aggregation, EDR)
• Background in detection engineering or security operations
• Experience with:
  • SOAR platform/automation development
  • Data lake / Database architecture
  • API design and internal platform creation
• Track record of applying ML/AI to security problems
• Experience scaling security operations in a high-growth environment

Deadline to apply: None. Applications will be reviewed on a rolling basis. 

About the Role: 

The Detection & Response (D&R) team plays a critical role in protecting our systems, users, and data from security threats. We’re looking for an experienced Technical Program Manager to own and evolve incident management within D&R. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from security and operational incidents.

You’ll be the driving force behind maturing and scaling our incident response lifecycle—from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented. 

You won’t just manage incidents—you’ll make sure we get meaningfully better after each one.

Responsibilities: 

• Own the end-to-end D&R incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for security incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders.
• Establish and run incident commander rotations within D&R, ensuring clear ownership and effective coordination during incidents of varying severity.
• Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams—ensuring follow-through on both tactical fixes and strategic improvements.
• Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable.
• Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms.
• Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization.
• Develop and maintain D&R incident response documentation, playbooks, runbooks, and training materials; keep them current as the threat landscape and our systems evolve.
• Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events.
• Define, develop, and track incident management KPIs and report regularly to D&R and Security leadership.
• Support broad cross-functional training and initiatives to uplevel security awareness across the company (e.g. Tabletop exercises, training, talks).

You may be a good fit if you:

• Have 7+ years of experience in technical program management, incident management, or security operations, with significant time spent in a detection & response or security incident response context.
• Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
• Have a demonstrated track record of turning incident data into organizational improvements—not just writing post-mortems, but driving the cross-functional work to implement systemic fixes.
• Are comfortable participating in on-call responsibilities and leading incident response during high-severity security events, including off-hours.
• Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist.
• Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop.
• Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
• Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations.
• Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
• Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information.

About the Role

We are seeking an exceptional Insider Risk Investigator with expertise in both human and technical investigations to support and protect Anthropic's mission. The Insider Risk Team works cross-functionally to deter, identify, investigate and mitigate risks to Anthropic's most critical assets—our people, our data, and our infrastructure.

Responsibilities

• Triage custom technical detection alerts
• Independently conduct end-to-end insider risk investigations while working closely with IT, Detection and Response, Legal, HR and other cross-functional teams
• Monitor and triage external threats targeting employees
• Conduct sensitive interviews of employees or other involved parties
• Perform technical analysis of logs from SIEM, DLP, UEBA systems 
• Leverage AI tools (Claude, Claude Code) to accelerate investigation workflows and data analysis
• Build and maintain investigation documentation
• Assist in iterating and improving on processes, procedures and systems to detect, mitigate and investigate insider risks
• Work cross-functionally to develop, refine and operationalize insider risk indicators, scenarios and mitigation strategies
• Provide rapid-turnaround security assessments to support business operations
• Support education and awareness programs to promote a robust security culture
• Serve as the subject matter expert for insider risk and provide training to team members as needed

You may be a good fit if you have

• Bachelor's degree and/or higher education in a related field
• 5-8 years of experience in insider risk, corporate investigations or a related domain
• 3-5 years experience in conducting investigative interviews
• Experience conducting OSINT for threat assessment, or counterintelligence
• Experience leveraging DLP, UEBA, SIEM, SOAR and other insider risk security tooling for detections and investigations
• Broad understanding of internal and external investigations, cybersecurity, interview techniques, risk assessment and managing strong cross-functional relationships
• Ability to communicate complex security findings clearly and concisely to non-technical stakeholders (written and verbal)
• Track record of rapid response to time-sensitive security requests
• Comfort operating across organizational boundaries (Security, People, Legal, IT)
• Exceptional communication, collaboration skills and the ability to lead projects with little guidance
• Demonstrated ability to operate independently with minimal oversight while managing sensitive cases

Strong candidates may also have

• Experience working in the technology industry or at/with AI/ML companies
• Experience with counterintelligence investigations and nation-state threat actor TTPs
• Background in open-source intelligence collection and analysis
• Track record of AI/LLM adoption for productivity gains in investigative work
• Experience contributing to a high growth startup environment
• Specialized knowledge of risks unique to the AI sector
• Experience with data exfiltration investigations across multiple vectors (email, cloud, removable media)
• Experience working in government, defense, or high-security environments

What makes you successful here

• Entrepreneurial mindset: You see gaps and fill them without being asked
• Technical + human balance: Equal comfort analyzing log data and conducting sensitive interviews
• AI-native approach: You leverage LLMs to work smarter, not just harder
• Mission alignment: You understand AI safety stakes and insider risk's role in protecting that mission
• Judgment under uncertainty: You make sound decisions with incomplete information
• Clear communicator: You distill complex findings into actionable insights for diverse audiences
• Cross-functional navigator: You build relationships and collaborate effectively across teams

Deadline to apply: None. Applications will be received on a rolling basis.

About The Role

The Enterprise SaaS team owns the collaboration and productivity platforms every person at Anthropic touches every day — Google Workspace, Slack, and the surrounding ecosystem of enterprise tools. We're responsible for tenant-wide architecture, API-level integration, and the governance that keeps these platforms secure and scalable as the company doubles and doubles again.

You'll make the architecture decisions that shape how thousands of people work: data governance for collaboration content, the application side of SSO and SCIM provisioning, and the integrations that fill gaps the vendors left open. You'll write Python against SaaS APIs where the admin console stops, and you'll be the final escalation tier when the vendor docs stop helping. The scope is the full collaboration stack — cloud infrastructure and endpoints live with separate teams, so this role goes deep rather than wide.

If you've hit the ceiling of what the admin console can do and started solving problems in code, this is that job. You'll partner closely with IT Operations, Security, and the IAM team on the identity and access layer everything else depends on. This role is high-autonomy: you'll define tenant architecture, write the integrations, and represent the SaaS platform across IT. Your work will directly shape how we scale to AI Safety Level 4 and beyond.

Responsibilities

• Own tenant-wide architecture for Google Workspace, Slack, and core collaboration platforms
• Design compartmentalization and data-governance models that scale with the company
• Build integrations and automation against SaaS APIs to automate provisioning and catch drift
• Configure the application side of SSO connections and SCIM attribute mappings
• Serve as the final escalation tier for platform issues Support can't resolve
• Lead vendor relationships — roadmap influence, escalation paths, engineering-level dialogue
• Partner with Corporate Security on SaaS hardening, third-party app governance, and compliance controls
• Own platform configuration as code — auditable, repeatable, and version-controlled

You may be a good fit if you

• Have 8+ years building secure IT systems in complex environments
• Excel at solving ambiguous problems with multiple stakeholders
• Communicate technical concepts clearly to any audience
• View IT Engineering as requiring product engineering rigor
• Successfully deliver complex projects from conception to production
• Write clear documentation as a natural part of your workflow
• Have deep, hands-on experience with enterprise administration of Google Workspace and Slack
• Have built integrations against SaaS APIs, not just configured through consoles
• Have been the final escalation tier

Strong candidates may also

• Have transformed traditional IT operations into engineering-driven organizations
• Have built strong partnerships with Security and Engineering teams
• Practice modern development methods (code reviews, testing, CI/CD)
• Work effectively in distributed teams
• Have experience with Infrastructure as Code approaches to SaaS configuration
• Have designed data governance or access controls for collaboration platforms
• Have experience with SCIM provisioning and SSO federation from the application side
• Have participated in M&A initiatives and led post-acquisition tenant consolidation — merging collaboration platforms, reconciling identity, migrating data

Technical Skills

Deep, hands-on experience with:

• Programming against SaaS APIs and SaaS API integrations
• Google Workspace administration
• Slack administration and APIs
• Identity protocols (SAML, OAuth, OIDC, SCIM)
• Enterprise collaboration platform architecture
• Security and compliance frameworks

Deadline to apply: None. Applications will be reviewed on a rolling basis. 

About the role

The Corporate Infrastructure team builds and operates the platform layer the rest of IT Engineering runs on — cloud infrastructure hosting our internal services, the CI/CD that ships IT's own code, the observability stack across the corporate environment, and the cross-system automation that wires together tools never designed to talk to each other.

You'll build deployment pipelines and internal tooling that let IT Engineering ship like a product team. You'll define SLOs for corporate services, build the monitoring to know when we're missing them, and run on-call for the things you deploy. You'll partner with our network and AV engineers as their infrastructure counterpart — automating physical-world systems, building the telemetry that tells us an office is degraded before someone files a ticket. The scope is broad and the team is deliberately small, which means you'll need depth across cloud, CI, and observability, strong judgment about where to invest, and a bias toward infrastructure-as-code over heroic manual fixes.

You'll report into IT Engineering and partner closely with Security, Network Engineering, and the broader IT org on the systems they depend on. This role is high-autonomy: you'll own the infrastructure roadmap, make architecture decisions, and be the engineer the rest of IT builds on. Your work will directly shape how we scale to AI Safety Level 4 and beyond.

Responsibilities

• Build and operate the cloud infrastructure that hosts IT's internal services
• Design CI/CD pipelines that let IT Engineering ship through code review and automated testing
• Own observability for corporate infrastructure — monitoring, alerting, dashboards, and SLOs
• Write cross-system automation to integrate third-party systems and internal services
• Partner with network, audiovisual, and physical security to deliver robust infrastructure solutions 
• Build internal tools — CLIs, bots, dashboards — that make other IT engineers faster
• Run on-call for corporate infrastructure with post-incident reviews that drive durable fixes
• Deploy infrastructure as code

You may be a good fit if you

• Have 8+ years building secure IT systems in complex environments
• Excel at solving ambiguous problems with multiple stakeholders
• Communicate technical concepts clearly to any audience
• View IT Engineering as requiring product engineering rigor
• Successfully deliver complex projects from conception to production
• Write clear documentation as a natural part of your workflow
• Have shipped Infrastructure as Code in production — Terraform or similar, with modules and state you maintained
• Have run services with SLOs, on-call rotations, and post-incident reviews
• Have built internal platforms or tooling that other engineers depend on

Strong candidates may also

• Have transformed traditional IT operations into engineering-driven organizations
• Have built strong partnerships with Security and Engineering teams
• Practice modern development methods (code reviews, testing, CI/CD)
• Work effectively in distributed teams
• Have experience with ECS, Kubernetes or other container orchestration for internal services
• Have automated physical-world infrastructure deployment (e.g., network configuration, office technology, physical security systems)
• Have worked with enterprise integration or workflow automation platforms (e.g., Workato, n8n, Tines, or equivalents)

Technical Skills

We're looking for deep, hands-on experience in each of these — not surface familiarity:

• Python, golang, etc
• Terraform and Infrastructure as Code
• Cloud platforms (AWS, GCP, Azure)
• CI/CD pipeline design
• Observability tooling (e.g., Prometheus, Grafana, Datadog, Honeycomb, or equivalent)
• Linux systems administration
• Strong networking skills
• Configuration management

Deadline to apply: None. Applications will be reviewed on a rolling basis. 

Responsibilities:

• Lead cybersecurity Incident Response efforts covering diverse domains from external attacks to insider threats involving all layers of Anthropic’s technology stack
• Develop and deploy novel tooling that may leverage Large Language Models to enhance detection, investigation, and response capabilities 
• Create and optimize detections, playbooks, and workflows to quickly identify and respond to potential incidents
• Review Incident Response metrics and procedures and drive continuous improvement 
• Work cross functionally with other security and engineering teams
• Note: This position will require participation in an on-call rotation

You may be a good fit if you:

• 3+ years of software engineering experience, with security experience a plus and/or
• 5+ years of detection engineering, incident response, or threat hunting experience
• A solid understanding of cloud environments and operations
• Experience working with engineering teams in a SaaS environment
• Exceptional communication and collaboration skills
• An ability to lead projects with little guidance
• The ability to pick up new languages and technologies quickly
• Experience handling security incidents and investigating anomalies as part of a team
• Knowledge of EDR, SIEM, SOAR, or related security tools

Strong candidates may also have experience with:

• Experience performing security operations or investigations involving large-scale Kubernetes environments
• A high level of proficiency in Python and query languages such as SQL
• Experience analyzing attack behavior and prototyping high quality detections
• Experience with threat intelligence, malware analysis, infrastructure as code, detection engineering, or forensics
• Experience contributing to a high growth startup environment

Deadline to apply: None. Applications will be reviewed on a rolling basis. 

About the Role

We are seeking a Detection and Response Engineering Manager to lead our Detection and Response teams in creating comprehensive Security Observability, Detection Lifecycle, and Security Incident Response programs for Anthropic. You will collaborate closely with teams and leaders across Anthropic, focusing on the observability, detection, investigation, incident response, and intelligence portions of the security lifecycle. You will collaborate closely with preventative security engineering teams and other cross-functional teams.

What you’ll do:

• Manage and grow a high-performing D&R team, planning strategy and hiring to support Anthropic's rapid growth and unique AI safety requirements
• Navigate prioritization in a fast-paced frontier environment, balancing operational demands with building innovative, scalable solutions for the future
• Collaborate across security engineering teams to build comprehensive prevention, observability, detection, and response capabilities throughout the security lifecycle
• Facilitate development of scalable, AI-leveraged D&R solutions that enable self-service observability and detection capabilities across Anthropic
• Build partnerships with product, infrastructure, and research teams to instill security monitoring best practices
• Own and continuously improve Security Incident Response, Data Management, and Detection Engineering policies and playbooks
• Operate our threat intelligence program and maintain relationships with external security partners and information sharing communities
• Continuously drive capability maturity across the detection lifecycle, establishing metrics and KPIs to measure effectiveness

Who you are:

• 10+ years building detection and response capabilities in a cloud-native organization
• 5+ years of engineering management experience with a proven track record of building and scaling security teams
• Deep understanding of security monitoring, threat detection, incident response, and forensics best practices
• Experienced in securing complex cloud environments (Kubernetes, AWS/GCP) with modern detection technologies
• Knowledgeable in AI/ML security risks, detection patterns, and response strategies
• Strong verbal and written communication skills with the ability to distill complex security topics
• Skilled at collaborating cross-functionally and effectively balancing security requirements with business objectives
• Able to drive high-impact work while incorporating feedback and adapting to changing priorities
• Passionate about building diverse, high-performing teams and growing engineers in a fast-paced environment
• Low ego, high empathy, and have a track record as a talent magnet who attracts and retains top security talent

Deadline to apply: None, applications will be received on a rolling basis.

About the role

The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do.

Responsibilities:

• Build security for large-scale AI clusters, implementing robust cloud security architecture including IAM, network segmentation, and encryption controls
• Design secure-by-design workflows, secure CI/CD pipelines across our services, help build secure cloud infrastructure, with expertise in various cloud environments, Kubernetes security, container orchestration and identity management
• Ship and operate secure, high-reliability services using Infrastructure-as-Code (IaC) practices and GitOps workflows
• Apply deep expertise in threat modeling and risk assessment to secure complex multi cloud environments
• Mentor engineers and contribute to hiring and growth of the Security team

You may be a good fit if you:

• 5-15+ years of software engineering experience implementing and maintaining critical systems at scale
• Bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
• Strong software engineering skills in Python or at least one systems language (Go, Rust, C/C++)
• Experience managing infrastructure at scale with DevOps and cloud automation best practices
• Track record of driving engineering excellence through high standards, constructive code reviews, and mentorship
• Proven ability to lead cross-functional security initiatives and navigate complex organizational dynamics
• Outstanding communication skills, translating technical concepts effectively across all organizational levels
• Demonstrated success in bringing clarity and ownership to ambiguous technical problems
• Strong systems thinking with ability to identify and mitigate risks in complex environments
• Low ego, high empathy engineer who attracts talent and supports diverse, inclusive teams
• Experience supporting fast-paced startup engineering teams
• Passionate about AI safety and alignment, with keen interest in making AI systems more interpretable and aligned with human values

Strong candidates may also have experience with:

• Designing and hardening CI/CD pipelines against supply chain attacks through isolated environments, signed attestations, dependency verification, and automated policy enforcement
• Building secure development workflows through hardened remote environments
• Implementing network segmentation and access controls in cloud environments
• Managing infrastructure through automated configuration and policy enforcement
• Hardening containerized applications and enforcing security policies

About the Role

We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up.

This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet.

What you'll do:

• Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers)
• Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer
• Develop measured boot implementations and runtime integrity monitoring
• Create reference architectures and security requirements for bare-metal deployments
• Integrate security controls with infrastructure teams without impacting training performance
• Prototype and validate security mechanisms before production deployment
• Conduct firmware vulnerability assessments and penetration testing
• Build firmware analysis pipelines for continuous security monitoring
• Document security architectures and maintain threat models
• Collaborate with software and hardware vendors to ensure security capabilities meet our requirements

Who you are:

• 8+ years of experience in systems security, with at least 5 years focused on firmware and hardware security (firmware, bootloaders, and OS-level security)
• Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone)
• Strong understanding of cryptographic protocols and hardware security modules
• Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust implementation
• Proficiency in low-level programming (C, Rust, Assembly) and systems programming
• Knowledge of firmware vulnerability assessment and threat modeling
• Track record of designing security architectures for complex, distributed systems
• Experience with supply chain security
• Ability to work effectively across hardware and software boundaries
• Knowledge of NIST firmware security guidelines and hardware security frameworks

Strong candidates may also have:

• Experience with confidential computing technologies and hardware-based TEEs
• Knowledge of SLSA framework and software supply chain security standards
• Experience securing large-scale HPC or cloud infrastructure
• Contributions to open-source security projects (coreboot, CHIPSEC, etc.)
• Background in formal verification or security proof techniques
• Experience with silicon root of trust implementations
• Experience working with building foundational technical designs, operational leadership, and vendor collaboration
• Previous work with AI/ML infrastructure security

Deadline to apply: None. Applications will be reviewed on a rolling basis. 

About the Role:

As part of Anthropic’s Global Safety, Intelligence, and Security (GSIS) team, the Security Technology Deployment Specialist will own the validation, standardization, and deployment of physical security technology across Anthropic’s rapidly expanding global office portfolio. This role bridges the gap between technology selection and production-ready operation — ensuring that every security platform deployed is rigorously tested, properly integrated with enterprise infrastructure, fully documented, and built for scale.

You’ll define the installation standards, configuration baselines, and deployment processes that the broader team executes against — from access control migrations and intercom replacements to AI analytics onboarding and new application integrations. You’ll work across InfoSec, IT, Networking, and Identity Management to ensure every security application passes review, integrates with SSO, and is supported within Anthropic’s infrastructure before going live. Your work will directly determine whether Anthropic’s security technology stack scales reliably as the company grows from dozens of locations to a global enterprise footprint.

Responsibilities:

• Validate and deploy new and replacement security technology platforms including access control systems, intercom solutions, video management, visitor management, and AI/analytics tools across all Anthropic locations
• Build and maintain staging environments for pre-production testing and validation of all security applications, hardware, firmware, and system configurations
• Define installation standards, configuration baselines, licensing structures, update procedures, and maintenance requirements for every deployed security platform
• Deploy integrations between security applications, validating that platforms communicate and share data correctly before transitioning to production
• Support colleagues’ security applications through InfoSec review processes, ensuring new tools meet Anthropic’s information security and compliance requirements
• Coordinate SSO integration for newly deployed security applications with Identity Management and IT teams
• Transition applications requiring custom integration or data pipeline development to the IT Engineering team with documented technical requirements for roadmap inclusion
• Initiate onboarding of deployed hardware and systems into Anthropic’s health monitoring platform to ensure operational visibility from day one
• Develop standardized deployment playbooks, checklists, configuration templates, and handoff documentation that enable repeatable installations across all current and future sites
• Evaluate security platforms for scalability, identifying capacity constraints, single points of failure, and architectural limitations before they impact operations at scale
• Coordinate with Networking, IT Infrastructure, and Facilities teams to ensure all infrastructure prerequisites (network, power, rack space, cloud resources) are met prior to deployment
• Execute structured handoffs to Project Management (for site programming), Break-Fix Support (for maintenance), and Access Control Administration (for ongoing system management), ensuring each team has the standards and documentation to execute independently

You may be a good fit if you:

• Have 5+ years of hands-on experience deploying, validating, and managing enterprise physical security technology across a large or rapidly growing organization
• Have deployed security technology across 50 or more sites, or have demonstrated experience in a high-growth environment where deployment velocity and repeatability were essential
• Have built standardized deployment processes, playbooks, and configuration templates that enabled others to execute installations independently and consistently
• Have experience working across InfoSec, IT, Networking, and Identity Management teams to onboard and integrate security applications into enterprise environments
• Have supported SSO integration, InfoSec reviews, and enterprise application onboarding workflows for security tools
• Possess broad technology experience across access control, video management, intercoms, visitor management, AI/analytics, and alarm monitoring platforms
• Are a strong technical communicator who can define standards clearly enough that PMs, integrators, and service teams execute against them without ambiguity
• Have experience with IP networking, VLANs, PoE, and infrastructure requirements for security devices
• Are comfortable with 25% travel for site deployments, commissioning, and validation

Strong candidates may have:

• Previous experience at a hyper-growth technology company or managing security technology programs for high-profile corporate environments
• Experience with Anthropic’s specific technology stack: Genetec Security Center, Axis cameras, Wavelynx, Commend Symphony Cloud, Alcatraz.ai, Ambient.ai, SureView, Envoy
• Industry certifications: Genetec, Axis, CCNA, PSP, CPP, or PMP
• Experience with OSDP, modern credential technologies, and encryption protocols for physical security systems
• Familiarity with scripting or automation (Python, PowerShell) for configuration management and deployment automation
• Experience with health monitoring and observability platforms
• Knowledge of SOC 2 compliance, GDPR, and physical security compliance frameworks
• Experience with change management, configuration control, and version-controlled infrastructure documentation

Deadline to apply: None. Applications will be received on a rolling basis.

About the Role

Security at Anthropic is not a compliance exercise. It is a core part of how we stay safe as we build increasingly capable systems. Our Responsible Scaling Policy commits us to launching structured security R&D projects: ambitious, time-boxed experiments designed to resolve high-uncertainty questions about our long-term security posture.

Each project runs for roughly 6 months with defined exit criteria. Some will succeed and move toward production. Others will fail, and we'll treat that as useful signals. The questions these projects are designed to answer include:

• Can our core research workflows survive extreme isolation?
• Can we get cryptographic guarantees where we currently rely on trust?
• Can AI become our most effective security control?

As a Security Labs Engineer, you own one or more projects end-to-end: scoping the experiment, building the infrastructure, coordinating across teams, running the pilot, documenting results, and where the experiment succeeds, helping scale it into production. This is 0-to-1 and 1-to-10 work.

Current Project Areas

The portfolio evolves based on what we learn. Current areas include:

• Designing and operating a mock high-assurance research environment: simulating what our infrastructure would look like under extreme isolation and physical security controls, with real measurement of productivity impact
• Exploring cryptographic verification of model integrity using techniques like zero-knowledge proofs to provide mathematical guarantees about what is running in production
• Assessing the feasibility of confidential computing across the full model lifecycle (note: this is an open question, not a committed roadmap item)
• Piloting AI-assisted security tooling including vulnerability discovery, automated patching, anomaly detection, and adaptive behavioral monitoring
• Prototyping API-only access regimes where even internal research workflows never touch raw model weights

Part of your job is helping shape what comes next based on gaps uncovered in the current round.

What You'll Do:

• Own the end-to-end execution of a Security Labs project: refine the hypothesis, design the experiment, build the prototype, run the pilot, and write up the results
• Build novel security infrastructure under real time pressure: isolated clusters, hardened access controls, cryptographic verification layers, with a bias toward learning fast
• Where experiments succeed, drive them toward production scale. An experiment that works on one cluster but not a hundred is not a finished result.
• Work embedded with research teams (Pretraining, RL, Inference) to stress-test whether their core workflows can function under extreme security controls, and document precisely where they break
• Evaluate and integrate emerging security technologies through coordination with external vendors and research groups
• Turn experimental results into clear, decision-ready writeups that inform Anthropic's long-term security architecture and RSP commitments
• Maintain a pain-point registry and feasibility assessment for each project, feeding directly into the design of production high-assurance environments
• Help scope and prioritize the next wave of Labs projects based on what the current round uncovers

You May Be a Good Fit If You Have:

• 7+ years of software or security engineering experience, with a solid foundation in production systems
• Some of that time spent on pilots, prototypes, or applied research work where shipping a working answer to a hard question was the explicit goal
• Strong programming skills in Python and at least one systems language (Go, Rust, or C/C++)
• Hands-on experience with cloud infrastructure (AWS, GCP, or Azure), Kubernetes, and networking fundamentals sufficient to stand up and tear down isolated environments quickly
• A track record of cross-functional execution: you can walk into a room with ML researchers, infrastructure engineers, and vendors and leave with a shared plan
• Clear written communication: you know how to turn six weeks of experimentation into a two-page memo someone can act on
• Comfort with ambiguity and iteration, having run experiments that failed, extracted the lesson, and moved forward
• Genuine curiosity about what it would actually take to defend against a nation-state-level adversary
• Passion for AI safety and a real understanding of the role security plays in making frontier AI development go well
• Bachelor's degree in Computer Science, a related field, or equivalent industry experience required.

Strong Candidates May Also Have:

• Prior experience in offensive security, red teaming, or security research, having thought adversarially about systems and knowing which threats actually matter
• Familiarity with airgapped or high-side environments (classified networks, ICS/SCADA, financial trading infrastructure, or similar) and the operational realities of working inside them
• Knowledge of applied cryptography: zero-knowledge proofs, attestation protocols, secure enclaves, TPMs, or confidential computing primitives
• Experience with ML infrastructure (training pipelines, inference serving, model packaging) sufficient for grounded conversations with researchers about what their workflows actually need
• Background building or operating security systems in environments that demand rapid iteration rather than rigid change control
• Prior work at a startup, on an innovation team, or in an applied research group where shipping a working v0 to answer a real question was explicitly the goal

Location

This role is based in our San Francisco office (500 Howard St). Several Labs projects involve physical secure facilities on-site, so expect to be in-office more frequently than Anthropic's standard 25% hybrid baseline.

We Encourage You to Apply

Not all strong candidates will meet every qualification listed above. Research shows that people from underrepresented groups are more likely to talk themselves out of applying. If this work interests you and you have most of what we're looking for, we'd like to hear from you.

We believe AI systems have profound social and ethical implications, and we think diverse perspectives make our work better. We actively work to build a team that reflects a range of backgrounds and experiences.

Deadline to Apply: None, applications will be received on a rolling basis.

About the Role

We are seeking a Crisis Management Specialist to join Anthropic's Global Safety, Intelligence, and Security (GSIS) team. In this role, you will be responsible for designing, building, and operationalizing Anthropic's enterprise crisis management program—equipping the company to prevent, prepare for, respond to, and recover from crises that could impact our people, operations, or mission.

This role sits at the intersection of emergency management, organizational resilience, and executive communication. You will lead crisis exercises and real-world activations, develop scalable response plans and playbooks, and build the capabilities of cross-functional teams to respond effectively under pressure. You will be a visible, trusted partner across the organization—known for your steady judgment, clear communication, and relentless focus on continuous improvement.

This is an individual contributor role with significant program ownership and the opportunity to help shape a function that is foundational to Anthropic's long-term resilience. As Anthropic scales globally, the stakes and complexity of our crisis management needs are growing—and this role is critical to meeting that challenge.

Responsibilities

• Design, develop, and maintain Anthropic's crisis management program, including response plans, playbooks, protocols, and governance structures aligned with industry frameworks (NIMS/ICS, ISO 22301)
• Plan and facilitate crisis exercises and tabletop simulations of increasing complexity to test plans, build team capabilities, and identify improvement opportunities across GSIS and cross-functional partners
• Serve as Incident Commander or direct support to the Incident Commander during crisis activations, providing leadership and coordination across response teams in real time
• Develop and deliver crisis readiness training for GSIS team members, executive stakeholders, and cross-functional response partners
• Lead after-action reviews following exercises and real-world incidents; track corrective actions to completion and incorporate lessons learned into future planning
• Collaborate with Legal, People, Communications, IT Security, and Facilities to build coordinated, cross-functional crisis response capabilities
• Support broader business continuity and resilience initiatives, including business impact analyses and threat/hazard assessments
• Monitor the threat environment for developments relevant to Anthropic's operations and advise leadership on emerging risks

You may be a good fit if you:

• Have 8+ years of professional experience in crisis management, emergency management, or incident response
• Have demonstrated experience as an Incident Commander, including leading cross-functional response teams in high-stress, rapidly evolving situations
• Hold a bachelor's degree or higher in Emergency Management, Risk Management, Business Administration, or equivalent practical experience
• Have designed and facilitated crisis exercises at multiple levels of complexity, with the ability to build realistic, instructive scenarios
• Possess exceptional written and verbal communication skills, including experience developing and delivering executive briefings during active incidents
• Can manage multiple active workstreams simultaneously under time pressure with minimal oversight
• Thrive in fast-moving, ambiguous environments and bring a continuous improvement mindset to everything you build
• Are available for on-call support and can work flexible hours, including nights and weekends, during crisis events

Strong candidates may also have:

• Familiarity with NIMS/ICS and experience applying those frameworks in a corporate or hybrid environment
• Experience in the technology sector, particularly supporting crisis management for cloud-native or AI-driven organizations
• Professional certifications such as CEM, CBCP, MBCI, or equivalent
• Knowledge of ISO 22301 and other relevant resilience standards and frameworks
• Experience with crisis management platforms and mass notification tools (e.g., Everbridge, Veoci, OnSolve)
• Background developing crisis communications strategies and stakeholder messaging frameworks

Deadline to apply: None. Applications will be received on a rolling basis.

About the Team

The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software.

The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will own one or two of these areas and contribute to others, with your focus shaped by your strengths and the team's priorities. This is largely greenfield work, and you will help define the architecture.

About the role:

• Scope, design, and build complex security systems end to end, maintaining them through production and driving through ambiguous technical challenges with minimal oversight
• Identify systematic risks through threat modeling and risk assessment, then build the controls and infrastructure that address them
• Mentor engineers across the security team and broader engineering organization, contribute to hiring, and grow security engineering culture at Anthropic
• Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond the security team

Developer security and supply chain

• Build and advance our developer security program by embedding security practices into the software development lifecycle and developer workflows
• Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement

Identity and secrets management

• Architect systems that protect sensitive assets including model weights, customer data, and training datasets
• Build and operate credential issuance, rotation, and workload authentication across our multi-cloud environments

Infrastructure security

• Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments
• Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security
• Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation

Secure frameworks

• Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities and empower engineering teams to work securely without becoming security experts themselves
• Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls

You may be a good fit if you have:

• At least 8 years of software engineering experience with deep security expertise, including leading complex security initiatives independently
• Bachelor's degree in Computer Science or equivalent industry experience
• Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++
• Deep understanding of identity systems, cryptographic primitives, and secrets management
• Working knowledge of Kubernetes security primitives including RBAC, namespaces, network policies, and service accounts
• Experience leading cross-functional security initiatives and navigating complex organizational dynamics
• Outstanding communication skills, translating technical concepts effectively across all levels of the organization
• A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution
• Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams
• Passion for AI safety and the role security engineering plays in building trustworthy AI systems

Strong candidates may also have:

• Designed or operated identity and secrets management systems for large-scale AI or cloud infrastructure
• Built security frameworks or libraries adopted across an engineering organization
• Led a developer security program including supply chain security, secure build infrastructure, and SDLC integrations
• Built or secured CI infrastructure using Nix, Bazel, or Kubernetes-based deploy systems, with depth in toolchain issues, CI/CD pipelines, and developer workflow optimization
• Implemented machine identity or workload authentication systems using SPIFFE/SPIRE, mTLS, or equivalent
• Understanding of Linux systems internals including namespaces, cgroups, and seccomp, and how these underpin container and workload isolation
• Contributed to the security architecture of multi-cloud environments including network segmentation, data protection, and access governance
• Experience with network security controls including admission controllers, CNI-level policy, service mesh security, and east-west traffic enforcement
• Experience building runtime security monitoring using eBPF or kernel security policies

Deadline to apply: None, applications will be received on a rolling basis.

About the Team

The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do.

What You’ll Do:

• Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments.
• Penetration test specific, high value deployments.
• Contribute to AI-assisted security testing tooling and workflows.
• Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios.
• Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps.

Who You Are:

• 5+ years of hands-on experience in red teaming and offensive security operations
• Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines
• Track record of discovering novel attack vectors and chaining vulnerabilities creatively
• Experience conducting adversarial simulations against well-defended environments
• Strong engineering skills (Python, Go, or similar)
• Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes
• Collaborative approach, working in close collaboration with the blue team

Strong candidates may also have experience with:

• Prior work at organizations with state actor threat models
• Interest in AI safety and how security engineering contributes to responsible AI developments
• Background testing AI/ML systems or agentic workflows
• Familiarity with detection engineering and SIEM/EDR platforms from the defensive side
• Experience with data center security or hardware-based attacks

Deadline to apply: None. Applications will be received on a rolling basis.

About the Role: 

As part of Anthropic's Global Safety, Intelligence, and Security (GSIS) team, the NYC Campus Security Manager serves as the operational security leader for Anthropic's New York City campuses. This position offers the opportunity to lead comprehensive security operations protecting cutting-edge AI research while building trust and security culture with Anthropic personnel. You'll serve as an approachable security partner who fosters open communication, oversees vendor performance, leads incident response, and coordinates cross-functional security initiatives that enable rather than restrict productivity. Working collaboratively with the greater Security Operations team, you'll balance hands-on operational leadership with strategic input on security planning while ensuring robust security posture across all NYC locations and maintaining AI Safety Level (ASL) compliance requirements.

Responsibilities: 

• Campus Security Operations: Lead comprehensive security operations for NYC-based campuses, ensuring safety, security, and well-being of all employees, visitors, and assets
• Security Culture & Trust Building: Serve as approachable security partner who builds trust with Anthropic personnel, fostering open communication and integrating security practices into daily operations without creating barriers to productivity
• Strategic Planning: Develop and implement security strategies for NYC campus that align with Anthropic's growth and evolving threat landscape
• Team Leadership: Train and coordinate security personnel and vendors, fostering culture of professionalism and continuous improvement
• Emergency Response: Lead and coordinate emergency response efforts for NYC campus, ensuring rapid and effective reactions to fires, medical emergencies, or security breaches
• Community Relations: Build strong relationships with New York City Police Department, local emergency services, and community leaders to enhance campus security
• Access Control: Partner with Access Risk Management on administration of access control systems, managing permissions and auditing access logs
• Security Technology: Work with IT and cross-functional teams to integrate and optimize campus security technologies
• Security Project Management: Manage security aspects of office remediations, process improvements, and new real estate needs, contributing strategic security requirements for NYC campus development

You may be a good fit if you:

• Have a passion for creating safe, secure environments that foster productivity and well-being
• Possess strong leadership skills and have experience coordinating security teams and vendors
• Are adept at building relationships with various stakeholders, including law enforcement and community leaders
• Have excellent crisis management skills and can lead effectively under pressure
• Are knowledgeable about physical security technologies and their applications in campus settings
• Are an effective communicator, able to convey security concepts to a wide audience
• Have 8+ years of progressive experience in security operations leadership or campus security management
• Based in or willing to relocate to New York City with ability to work on-site full-time
• Comfortable supporting operations that may require a flexible schedule including 24/7 on-call rotation and after-hours response

Strong candidates may have:

• Experience securing high-profile or high-risk campus environments in technology or research sectors
• Professional security certifications such as CPP (Certified Protection Professional) or PSP (Physical Security Professional)
• Bachelor's degree in Security Management, Criminal Justice, Emergency Management, or related fields
• Background in technology company security operations or R&D facility security management
• Previous experience in law enforcement, military, or executive protection with transition to corporate security

Deadline to apply: None. Applications will be received on a rolling basis.

Responsibilities:

• Help secure AI products and internal tools that are introducing industry-novel security risks and pushing established security boundaries
• Lead “shift left” security efforts to build security into the software development lifecycle.
• Conduct secure design reviews and threat modeling. Identify and prioritize risks, attack surfaces, and vulnerabilities.
• Develop tooling to scale security code reviews and respond to developer questions, including advising developers on remediating vulnerabilities and following secure coding practices. 
• Manage Anthropic's vulnerability management program, including integrating data ingestion pipelines, coding logic to prioritize vulnerability fixes, supporting teams remediating vulnerabilities and developing automated systems at scale.
• Oversee Anthropic's bug bounty program. Set scope, validate submissions, perform root cause analysis, coordinate remediation with engineering teams, and award bounties. Cultivate relationships with the ethical hacker community.
• Collaborate closely with product engineers and researchers to instill security best practices. Advocate for secure architecture, design, and development.
• Develop and document security policies, standards, and playbooks. Conduct security awareness training for engineers.

You may be a good fit if you:

• Have 5+ years of hands-on experience in application and infrastructure security, including securing cloud-based and containerized environments.
• Strong proficiency in at least one programming language (e.g., Python, Rust, Go, Java)
• Lead with empathy, a collaborative spirit, and a learning mindset to work cross-functionally with engineers of all levels to build security into the software development life cycle.
• Leverage creative and strategic thinking to reduce risk through secure design and simplicity, not just controls.
• Possess broad security knowledge to connect the dots across domains and identify holistic ways to decrease the overall threat surface.
• Are keen to distill complex security concepts into clear actions and drive consensus without direct authority.
• Embody a proactive mindset to thread security throughout the product lifecycle through activities like threat modeling, secure code review, and education.
• Have a strong grasp of offensive security to anticipate risks from an adversary's perspective, not just check compliance boxes.
• Bring experience with modern application stacks, infrastructure, and security tools to implement pragmatic defenses.
• Are practiced at collaborating cross-functionally and effectively balancing security requirements with business objectives.
• Advocate for security fundamentals like least privilege, defense-in-depth, and eliminating complexity that could sub-linearly scale security through smart design.

Strong candidates may also:

• Hands-on technical expertise securing complex cloud environments and microservices architectures leveraging technologies like Kubernetes, Docker, and AWS / GCP.
• Exposure to offensive security techniques like vulnerability testing, bug bounty, pen testing, and red team exercises. 
• Familiarity with AI/ML security risks such as prompt injection, data poisoning, model extraction, etc. and mitigations.
• Experience building security tools, applications, and automated tools.
• Solid foundational knowledge of both software and security engineering principles and are keen to continue learning.
• Excellent communication skills, able to distill complex security topics for broad audiences.
• Worked and thrived in fast-paced environments, and comfortable navigating ambiguity.

Deadline to apply: None. Applications will be reviewed on a rolling basis.