Staff Software Security Engineer

Details

Anthropic's Security Engineering team safeguards its AI systems and maintains the trust of users and society. The role focuses on securing large-scale AI clusters across multiple clouds and bare-metal data centers, building secure development practices, and partnering with research, product, infrastructure, networking, cluster, and data center teams.

Responsibilities

• Build security for large-scale AI clusters across multiple clouds and bare-metal data centers, including IAM, network segmentation, and encryption controls.
• Design and implement network security controls, including default-deny ingress and egress, segmentation between research, training, and production environments, private connectivity across clouds and data centers, cloud firewall policy, and mTLS with service identity.
• Ship security controls as secure defaults using infrastructure as code and GitOps workflows so that new clusters, VPCs, and data center links inherit the appropriate boundaries.
• Build visibility into network traffic and boundary drift, with detection for exfiltration paths and automated remediation where safe.
• Design secure-by-design development workflows and CI/CD pipelines across services, with expertise in Kubernetes security, container orchestration, and identity management.
• Threat model and assess risk for complex multi-cloud and networked environments.
• Join infrastructure networking, cluster, and data center teams at design time to ensure topology, routing, and firewall decisions incorporate security requirements from the outset.
• Mentor engineers and contribute to hiring and growth of the Security team.

Requirements

• 8–15+ years of software engineering experience implementing and maintaining critical systems at scale.
• Strong software engineering skills in Python or at least one systems language, such as Go, Rust, or C/C++.
• Experience implementing and operating critical systems at scale using DevOps and cloud automation practices, including infrastructure as code.
• Hands-on network security engineering experience in cloud or on-premises environments, such as VPC design, cloud firewall policy, egress control, private service connectivity, or network segmentation.
• Working knowledge of Kubernetes security and networking, including network policy, service identity, and container hardening.
• Experience with threat modeling and risk assessment for networked and multi-cloud systems.
• A track record of driving engineering excellence through high standards, constructive code reviews, and mentorship.
• Clear communication skills, including the ability to translate technical concepts across organizational levels and bring clarity and ownership to ambiguous technical problems.
• A low-ego, high-empathy approach to engineering, with the ability to attract talent and support diverse, inclusive teams.
• Experience supporting fast-paced startup engineering teams.

Preferred Experience

• Secured Kubernetes networking at scale, including CNI, network policy, service mesh, or mTLS rollouts, or experience in high-assurance environments where controls had to be evidenced, not just deployed.
• Interconnects and private connectivity between cloud providers and physical data centers, including management-plane and out-of-band network security.
• Network traffic visibility or exfiltration detection systems.
• Large-scale distributed training and its network requirements.
• Leading cross-functional security initiatives and navigating complex organizational dynamics.
• Managing infrastructure through automated configuration and policy enforcement.
• Hardening containerized applications and enforcing security policies.

Education and Logistics

• Minimum education: Bachelor's degree or an equivalent combination of education, training, and/or experience.
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience.
• Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position.
• Location-based hybrid policy: Staff are expected to be in one of Anthropic's offices at least 25% of the time, although some roles may require more office time.
• Anthropic sponsors visas, although sponsorship is not available for every role and candidate. If an offer is made, Anthropic will make every reasonable effort to obtain a visa and provides assistance from an immigration lawyer.

Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office space for collaboration.