Staff Software Security Engineer

• The Security Engineering team’s mission is to safeguard our AI systems and maintain the trust of our users and society at large
• Whether we’re developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do
• You’ll build security for large-scale AI clusters, implementing robust cloud security architecture including IAM, network segmentation, and encryption controls
• Design secure-by-design workflows, secure CI/CD pipelines across our services, help build secure cloud infrastructure, with expertise in various cloud environments, Kubernetes security, container orchestration and identity management
• Ship and operate secure, high-reliability services using Infrastructure-as-Code (IaC) practices and GitOps workflows
• Apply deep expertise in threat modeling and risk assessment to secure complex multi cloud environments
• Mentor engineers and contribute to hiring and growth of the Security team

Benefits

• Comprehensive health, dental, and vision insurance for you and your dependents
• Inclusive fertility benefits via Carrot Fertility
• 22 weeks of paid parental leave
• Flexible paid time off and absence policies
• Mental health support for you and your dependents
• Competitive salary and equity packages
• Optional equity donation matching at a 1:1 ratio, up to 25% of your equity grant
• Retirement plans with competitive matching
• Life and income protection plans
• $500/month flexible wellness and time saver stipend
• Commuter benefits
• Annual education stipend
• Home office stipends
• Relocation support for those moving for Anthropic
• Daily meals and snacks in the office

• Working knowledge of Kubernetes security and networking, including network policy, service identity and container hardening
• Experience supporting fast-paced startup engineering teams
• Clear communicator who can translate technical concepts across organizational levels and bring clarity and ownership to ambiguous technical problems
• Experience implementing and operating critical systems at scale using DevOps and cloud automation practices such as infrastructure as code
• Experience with threat modeling and risk assessment for networked and multi cloud systems
• Have 8-15+ years of software engineering experience implementing and maintaining critical systems at scale
• Hands-on network security engineering in cloud or on-prem environments, for example VPC design, cloud firewall policy, egress control, private service connectivity or network segmentation
• Track record of driving engineering excellence through high standards, constructive code reviews and mentorship
• Strong software engineering skills in Python or at least one systems language (Go, Rust, C/C++)
• Low ego, high empathy engineer who attracts talent and supports diverse, inclusive teams
• Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
• Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
• We encourage you to apply even if you do not believe you meet every single qualification
• Secured Kubernetes networking at scale (CNI, network policy, service mesh or mTLS rollouts) or worked in high-assurance environments where controls had to be evidenced, not just deployed
• Worked on interconnects and private connectivity between cloud providers and physical data centers, including management-plane and out-of-band network security
• Exposure to large-scale distributed training and what it demands of a network
• Built network traffic visibility or exfiltration detection systems
• Led cross-functional security initiatives and navigated complex organizational dynamics
• Hardening containerized applications and enforcing security policies
• Managing infrastructure through automated configuration and policy enforcement