Platform Security Auditor: Firmware & Boot Integrity

Applied Methods Ltd; San Francisco (CA); Hybrid; USD 320,000 - 405,000; Full time

Benefits offered by this job

Health insurance

Job summary

Anthropic, based in San Francisco, seeks a Platform Security Engineer to audit core platform security elements from firmware to OS. You will own vulnerability discovery and ensure fixes are robust in production, working with hardware and software teams across multiple sites.

Required expertise includes secure boot, attestation, and threat modeling with strong C/Assembly skills. This role offers a hybrid policy with offices in San Francisco, New York, and Seattle.

Qualifications

• Hands-on vulnerability auditing experience on complex systems.
• Experience with secure/measured boot and attestation technologies.
• Strong understanding of cryptographic protocols and hardware modules.
• Proficiency in low-level languages (C/Assembly) and systems programming.
• Knowledge of firmware security and chain of trust implementations.

Responsibilities

• Audit secure boot chains from firmware to OS across hardware platforms.
• Audit attestation systems and measured boot for integrity.
• Build firmware vulnerability assessment pipelines for continuous monitoring.
• Document security architectures and threat models.
• Collaborate with vendors to meet exploit mitigation requirements.
• Conduct firmware vulnerability assessments and penetration testing.

Skills

Vulnerability auditing

Secure boot

Measured boot

Attestation

Cryptography

Hardware security modules

UEFI/BIOS security

Bootloader hardening

Chain of trust

C programming

Assembly

Firmware threat modeling

Cross-functional collaboration

Communication skills

Security architecture

Education

Bachelor’s degree

Tools

UEFI/BIOS debugging tools

Firmware analysis tools

Job description

Anthropic, based in San Francisco, seeks a Platform Security Engineer to audit core platform security elements from firmware to OS. You will own vulnerability discovery and ensure fixes are robust in production, working with hardware and software teams across multiple sites.

Required expertise includes secure boot, attestation, and threat modeling with strong C/Assembly skills. This role offers a hybrid policy with offices in San Francisco, New York, and Seattle.