Platform Security Auditor: Firmware & Trust

Anthropic; San Francisco (CA); Hybrid; USD 320,000 - 405,000; Full time

Benefits offered by this job

Equity donation matching

Flexible working hours

Generous vacation and parental leave

Office space in SF

Job summary

Anthropic is seeking a vulnerability assessment candidate for platform security. You will audit firmware, bootloaders, and attestation systems to identify and remove vulnerabilities from the ground up, owning the fixes in production.

The role emphasizes hands-on work across hardware and software boundaries. Required experience includes secure boot, attestation tech, cryptographic protocols, and low‑level programming.

Qualifications

• Hands-on vulnerability auditing on complex, security-critical systems.
• Experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone).
• Strong understanding of cryptographic protocols and hardware security modules.
• Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, chain of trust.

Responsibilities

• Audit secure boot chains from firmware through OS initialization for diverse hardware platforms.
• Audit attestation systems providing cryptographic proof of system state.
• Audit measured boot implementations and runtime integrity monitoring.
• Integrate security controls with infrastructure teams without affecting performance.
• Validate security mechanisms before production deployment.
• Conduct firmware vulnerability assessments and penetration testing.
• Build firmware vulnerability assessment pipelines for continuous security monitoring.
• Document security architectures and maintain threat models.
• Collaborate with vendors to ensure security capabilities meet exploit mitigation requirements.

Skills

Vulnerability auditing

Secure boot / bootloaders

Cryptographic protocols

UEFI/BIOS security

Low-level programming (C, Assembly)

Threat modeling

Cross-functional collaboration

Communication skills

Reverse engineering (binary)

Fault injection / side-channel

Rust / Go familiarity

LLMs for security assessment

Education

Bachelor's degree

Tools

Firmware analysis tools

TPM / TrustZone tooling

BIOS/firmware security tools

Job description

Anthropic is seeking a vulnerability assessment candidate for platform security. You will audit firmware, bootloaders, and attestation systems to identify and remove vulnerabilities from the ground up, owning the fixes in production.

The role emphasizes hands-on work across hardware and software boundaries. Required experience includes secure boot, attestation tech, cryptographic protocols, and low‑level programming.