Platform Security Auditor: Firmware & Attestation

Anthropic; Seattle (WA); Hybrid; USD 320,000 - 405,000; Full time

Job summary

Anthropic seeks a vulnerability assessment candidate for platform security in Seattle. You will audit secure boot chains, attestation systems, and firmware across hardware and software boundaries to identify and remediate vulnerabilities from the ground up.

Successful candidates have hands-on experience with secure boot, TPM, Rust or Go, low-level programming, and threat modeling, and can collaborate across hardware and software teams while owning fixes through production.

Qualifications

• Hands-on vulnerability auditing on security-critical systems.
• Experience with secure boot, attestation technologies (TPM/Intel TXT/AMD SEV/TrustZone).
• Strong cryptography knowledge and hardware security fundamentals.
• Experience with firmware security and bootloader hardening.
• Proficiency in low-level programming (C/Assembly).
• Ability to model threats across complex systems.

Responsibilities

• Audit secure boot chains from firmware to OS across diverse hardware.
• Audit attestation systems providing cryptographic proofs of state.
• Audit measured boot and runtime integrity monitoring.
• Collaborate with hardware/software teams to implement fixes.
• Validate security mechanisms before production deployment.
• Conduct firmware vulnerability assessments and pen-testing.
• Document security architectures and threat models.

Skills

Vulnerability auditing

Low-level security

Secure boot/attestation

Cryptographic protocols

UEFI/BIOS security

C/Assembly

Threat modeling

Cross-functional collaboration

Education

Bachelor's degree in a relevant field

Tools

TPM tooling

Reverse engineering tools

Static analysis tools

Job description

Anthropic seeks a vulnerability assessment candidate for platform security in Seattle. You will audit secure boot chains, attestation systems, and firmware across hardware and software boundaries to identify and remediate vulnerabilities from the ground up.

Successful candidates have hands-on experience with secure boot, TPM, Rust or Go, low-level programming, and threat modeling, and can collaborate across hardware and software teams while owning fixes through production.