Platform Security Engineer – OpenBMC

About the role

Anthropic is building a founding team to own the server management firmware for its fleet. As a Platform Security Engineer you will develop production‑grade OpenBMC firmware for x86 and Arm platforms and ensure it meets a high security bar.

Key responsibilities

• Design, build, and ship OpenBMC firmware and manageability features for x86 and Arm (including GPU) platforms from bring‑up through production using Yocto/OpenEmbedded.
• Implement the management stack based on DMTF/OCP standards (MCTP, PLDM, SPDM, Redfish, RDE) and IPMI/KCS, covering sensors, telemetry, inventory, logging, and RAS.
• Develop BMC‑to‑BIOS/host communications, eSPI/LPC, and thermal/fan/power management (PMBus).
• Work across hardware/firmware boundaries (I2C/I3C, SPI, PCIe, SMBus, device trees, U‑Boot, Linux).
• Own BMC security posture: secure boot, root of trust, attestation, authenticated updates, rollback protection, and attack‑surface reduction.
• Lead threat modeling, secure design reviews, and coordinated vulnerability disclosure with vendors and upstream communities.
• Create verification tooling such as static analysis, fuzzing, firmware extraction, and CI gating.

Required profile

• Strong cross‑functional leadership and direction‑setting abilities.
• Hands‑on experience with OpenBMC/BMC firmware on x86 or Arm, from bring‑up to production, including D‑Bus/sdbusplus.
• Proficiency in C/C++ and Python, deep Linux user‑space/kernel knowledge, and Yocto/OpenEmbedded expertise.
• Security‑first mindset applied to firmware development.
• Track record of upstream contributions to OpenBMC, U‑Boot, DMTF, or OCP.
• Working knowledge of out‑of‑band and in‑band management, relevant DMTF specifications, and associated device interfaces.
• Strong debugging skills and a history of shipping reliable, well‑tested code.
• Clear communication across internal teams and external vendors.

Required skills

• OpenBMC / BMC firmware development
• Yocto / OpenEmbedded
• C, C++
• Python
• Linux kernel and user‑space
• D‑Bus, sdbusplus
• DMTF standards (MCTP, PLDM, SPDM, Redfish, RDE, IPMI/KCS)
• eSPI, LPC, PMBus
• I2C, I3C, SPI, PCIe, SMBus
• Device trees, U‑Boot
• Static analysis, fuzzing, CI tooling
• NIST SP 800‑193, SP 800‑147, SP 800‑155 guidelines