Staff + Software Security Engineer, Secure Frameworks

Details

Anthropic's Secure Frameworks team builds shared security libraries and frameworks used across the company, including workload identity and authorization, cryptographic frameworks, and a centralized access proxy for internal applications. The team aims to make secure behavior the default and prevent entire classes of vulnerabilities through careful design.

Responsibilities

• Build critical security foundations, including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems.
• Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls.
• Scope, design, build, and operate security services and libraries end-to-end.
• Drive ambiguous technical problems with minimal oversight.
• Build and operate the zero-trust access gateway for Anthropic's internal services.
• Design and roll out authorization frameworks that consistently enforce least privilege.
• Own cryptographic frameworks and libraries.
• Mentor engineers, contribute to hiring, and help grow security engineering culture across Anthropic.
• Take systems from threat modeling through production, on-call operations, and adoption.

Requirements

• 8+ years of software engineering experience building security-relevant systems in production, including independently leading complex initiatives.
• Strong programming skills in Go, Rust, or Python.
• Deep understanding of authentication and authorization systems, including OAuth 2.0/OIDC, JWTs, service-to-service authentication, and policy-based access control.
• Hands-on experience with PKI, X.509, mTLS, and workload identity.
• Working knowledge of applied cryptography, including selecting and composing primitives correctly, key management, and understanding how libraries fail in practice.
• Experience shipping and operating high-reliability services on Kubernetes across cloud and on-premises environments, including on-call responsibility.
• Proven ability to bring clarity and ownership to ambiguous technical problems and drive them to resolution across teams.
• Strong developer experience mindset.
• Clear communication across all levels of the organization.
• Passion for AI safety and the role of security engineering in building trustworthy AI systems.

Preferred Qualifications

• Experience building security frameworks or libraries adopted across an engineering organization and driving their adoption.
• Experience building or operating a zero-trust or BeyondCorp-style access gateway or identity-aware proxy.
• Experience migrating a fleet to mTLS at scale, including certificate issuance and staged enforcement.
• Experience maintaining or contributing to open-source cryptographic libraries.
• Experience designing authorization systems using policy languages or relationship-based models.
• Familiarity with machine learning infrastructure, including training and inference serving.

Education and Logistics

• Minimum education: Bachelor's degree or an equivalent combination of education, training, and experience.
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience.
• Minimum years of experience will correlate with internal job-level requirements.
• Anthropic currently expects staff to work from one of its offices at least 25% of the time, although some roles may require more office time.
• Anthropic sponsors visas, although sponsorship is not guaranteed for every role or candidate. The company states that it will make every reasonable effort to obtain a visa for an offered candidate and provides immigration lawyer support.

Benefits

Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office space for collaboration.