Staff+ Software Security Engineer

About the role

Anthropic is looking for a Staff+ Software Security Engineer to design, build, and operate advanced security systems that protect its AI training infrastructure and data. You will work across identity, developer security, infrastructure, and cryptographic frameworks, shaping the security architecture from the ground up.

Key responsibilities

• Scope, design, and implement end‑to‑end security solutions, maintaining them in production with minimal oversight.
• Conduct threat modeling and risk assessments, then create controls and infrastructure to mitigate identified risks.
• Mentor engineers, contribute to hiring, and foster a security‑first culture across the organization.
• Provide design‑pattern guidance to other teams, extending security ownership beyond the security group.
• Advance the developer security program by embedding security into the software development lifecycle and hardening CI/CD pipelines against supply‑chain attacks.
• Architect and operate credential issuance, rotation, and workload authentication across multi‑cloud environments.
• Implement cloud security controls such as IAM, network segmentation, VPC architecture, and encryption for both cloud and on‑premise systems.
• Contribute to cluster security, including RBAC policies, namespace isolation, workload identity, and pod security.
• Drive continuous cloud security posture management using infrastructure‑as‑code scanning, misconfiguration detection, and automated remediation.
• Build core cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems.

Required profile

• Proven experience designing and operating large‑scale security systems for complex, multi‑cloud environments.
• Strong background in threat modeling, risk assessment, and security architecture.
• Ability to mentor engineers and influence security practices across diverse engineering teams.
• Hands‑on experience with identity and secrets management, CI/CD pipeline security, and cloud security controls.

Required skills

• Threat modeling
• Risk assessment
• CI/CD pipeline security
• Supply‑chain attack mitigation
• Credential issuance and rotation
• Workload authentication
• IAM
• Network segmentation
• VPC architecture
• Encryption
• RBAC
• Namespace isolation
• Pod security
• Infrastructure‑as‑code scanning
• Cryptographic frameworks
• mTLS
• Secure serialization
• Authorization systems