Staff / Senior Data Center Security Engineer
Anthropic · Remote-Friendly (Travel Required) | San Francisco, CA
About this role
## Staff / Senior Data Center Security Engineer ### About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems—safe and beneficial for users and society. ### About the role Claude is trained and served on hardware in data centers Anthropic operates and in partner sites that build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it. You’ll own one or more security domains end to end—designing controls, building systems that enforce and verify them, and setting the technical standard for the rest of the team and partners. This is a foundational role focused on controls and tooling that “runs itself”: requirements kept as code and checked automatically, evidence and chain of custody continuously verified, and tools/agents that support (and reduce reliance on) manual reviews. The team favors simple, standard controls and tools that can be verified. You’ll work closely with DCSE, compute and data center operations, legal/compliance/procurement, and directly with data center operators, hardware vendors, and logistics providers. **Travel:** Regular travel to data center sites (critical infrastructure). **On-call:** May include security event response. ### Key responsibilities - **Security domains, end to end:** Physical security at partner- and Anthropic-operated sites; hardware supply chain and chain of custody; media protection and sanitization; personnel security and site access; third-party/vendor security assessment; maintenance and contingency controls. - **Tools, automation, and AI agents:** Build internal tooling for evidence collection, access reviews, asset/custody tracking, and partner intake. Automate recurring manual work. - **Security review for new sites, leases, and vendors:** Identify gaps in design/contract/operator procedures; write security terms and exhibits; verify fixes after signing. - **Requirements and procedures as code:** Write requirements/procedures partners can build to and assessors can test; keep them in version-controlled repositories. - **Site and supplier assessment:** Assess sites/suppliers against requirements (on-site and via evidence); document deviations; engineer compensating controls when requirements can’t be met as written. - **Continuous compliance evidence:** Tie controls to relevant compliance frameworks and keep evidence current so assessments can pull directly from it. - **Security event response:** Respond to site security events (intrusion alarms, custody breaks, access violations) with operations and site operators; document what happened and fix the control that allowed it. ### Minimum qualifications - Engineered a security control domain end to end: designed controls, built/integrated enforcement systems, and verified they work. - Can read/review code and build automation for security tooling (often with AI coding agents) using Git and code review. - Hands-on security experience for data centers/critical infrastructure/large hardware fleets in at least one of the domains above. - Applied control frameworks such as **NIST SP 800-53**, **ISO 27001**, or **SOC 2** to real systems and produced evidence. - Wrote requirements that a third party can build to and an assessor can test (including verification approach and evidence). ### Preferred qualifications - Experience across multiple domains (not just one). - Experience at sites you didn’t fully control (cloud, colocat
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.