Description
Job Description
Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole.
About the Role
You'll be the engineer for one or more security domains end to end: design the controls, build the systems that enforce and verify them, and set the technical standard the rest of the team and our partners build to.
Key Responsibilities
- Own one or more security domains end to end: physical security at partner-operated and Anthropic-operated sites, hardware supply chain and chain of custody, media protection and sanitization, personnel security and site access, third-party and vendor security assessment, and maintenance and contingency controls
- Build internal tools, automation, and agents: evidence collection, access reviews, asset and custody tracking, partner intake
- Perform security reviews for new sites, leases, and vendors: find gaps in design, contracts, and procedures, write security terms and exhibits, and verify fixes
- Write requirements and procedures as code: kept in a version-controlled repository
- Assess sites and suppliers against requirements: document deviations and engineer compensating controls
- Ensure continuous compliance evidence: tie controls to compliance frameworks, with current evidence
- Respond to security events at sites: investigate, write up incidents, and fix controls
Minimum Qualifications
- Engineered a security control domain end to end: designed controls, built or integrated enforcing systems, and verified they work
- Read and reviewed code, designed data systems behind security tooling, and built automation using Git and code review
- Performed security work hands-on for data centers, critical infrastructure, or large hardware fleets
- Applied a control framework such as NIST SP 800-53, ISO 27001, or SOC 2 to real systems and produced evidence
- Wrote requirements a third party can build to and an assessor can test
Preferred Qualifications
- Experience across multiple domains
- Experience at sites without full control: cloud, colocation, or GPU cloud operators
- Experience with federal assessment regimes based on NIST SP 800-53
- Built governance, risk, and compliance (GRC) or evidence automation
- Ran incident response at physical sites
- Worked in live data halls and on active construction sites
- Experience redlining contract security language with legal and procurement counterparts
- Built AI agents or automation that replaced recurring manual security work
Logistics
- Annual Salary: $320,000-$405,000 USD