Platform Security Engineer, Anthropic

• 5+ years of experience in operating systems security or kernel development
• Deep knowledge of Linux internals, including kernel subsystems and security frameworks (SELinux, AppArmor, seccomp, etc.)
• Experience with kernel hardening techniques and exploit mitigation
• Strong programming skills in C and systems programming languages
• Experience with eBPF for security monitoring and enforcement
• Understanding of virtualization and containerization security
• Track record of identifying and fixing OS-level security vulnerabilities
• Experience with security-focused Linux distributions
• We require at least a Bachelor's degree in a related field or equivalent experience
• We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed
• We urge you not to exclude yourself prematurely and to submit an application if you're interested in this work

Desirable

• We're looking for an Operating Systems Security Engineer to harden and secure the OS layer of our infrastructure
• You'll be responsible for designing and implementing OS-level security controls, from kernel hardening to runtime protection, ensuring our systems can withstand sophisticated attacks while maintaining the performance required for AI model training
• This is a hands-on role where you'll work with cutting-edge hardware and implement novel security solutions for environments that don't exist anywhere else in the world
• You'll need to balance extreme security requirements with the operational needs of researchers training models at unprecedented scale
• Design and implement hardened OS configurations for AI workloads across diverse hardware platforms
• Develop kernel security policies using SELinux, AppArmor, and custom Linux Security Modules and runtime enforcement mechanisms
• Implement and maintain full-disk encryption solutions for diverse storage systems
• Build security infrastructure for AI systems, research environments, and production services
• Build secure network stacks with appropriate isolation and segmentation
• Create OS-level attestation and integrity monitoring systems
• Develop security patches, custom kernel modules, and kernel hardening configurations
• Design secure boot processes and trusted execution environments
• Work with container teams to ensure proper workload isolation at the kernel level
• Design privilege separation and mandatory access control policies
• Implement secure update mechanisms for OS components
• Build tooling for security configuration management and compliance verification
• Serve as a subject matter expert for OS security questions and designs

• Applications will be reviewed on a rolling basis