Staff + Software Security Engineer, Secure Frameworks

Anthropic is building reliable, interpretable AI systems designed to be safe and beneficial. The company brings together researchers, engineers, policy experts, and business leaders focused on developing trustworthy AI that serves both users and society well. As demand for AI systems grows, Anthropic is expanding rapidly and investing in the foundational security infrastructure that will support its platform at scale.

The Secure Frameworks team sits within Anthropic's Security Engineering organization and owns the shared security foundations that the entire company depends on. You will design, build, and operate critical security systems including cryptographic frameworks, workload identity solutions, authorization controls, and the zero-trust access gateway protecting internal services. Your work prevents entire classes of vulnerabilities by making secure behavior the default for engineers across the company.

What you'll do

• Design and build cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems used throughout Anthropic's infrastructure
• Partner with product, research, infrastructure, and other security teams to ensure security frameworks integrate smoothly with existing controls
• Scope, design, build, and maintain security services and libraries end-to-end, including production operations and on-call responsibilities
• Build and operate the zero-trust access gateway that fronts Anthropic's internal services
• Design and deploy authorization frameworks that enforce least privilege across services
• Mentor other engineers, contribute to hiring, and help develop security culture across the organization
• Drive through ambiguous technical problems with minimal oversight and bring clarity to complex initiatives

What you'll bring

• 8+ years of software engineering experience building security systems in production, with a track record of leading complex initiatives independently
• Strong programming skills in Go, Rust, or Python
• Deep expertise in authentication and authorization systems including OAuth 2.0, OIDC, JWTs, and policy-based access control
• Hands-on experience with PKI, X.509, mTLS, and workload identity systems
• Applied cryptography knowledge including primitive selection, key management, and real-world library failures
• Experience shipping and operating high-reliability services on Kubernetes across cloud and on-premises environments, including on-call rotations
• Clear communication across organizational levels and strong developer experience instincts
• Genuine commitment to AI safety and security engineering's role in building trustworthy systems

Nice to have

• Experience building security frameworks or libraries adopted across an engineering organization
• Track record building or operating zero-trust access gateways or identity-aware proxies
• Experience migrating infrastructure to mTLS at scale
• Open-source cryptographic library contributions
• Familiarity with ML infrastructure including training and inference serving

What they offer

• Annual salary of 32,000 to 485,000 USD
• Visa sponsorship support with retained immigration counsel
• Hybrid work policy requiring at least 25% office presence in San Francisco, New York City, or Seattle
• Bachelor's degree or equivalent professional experience required