Platform Security Engineering, Operating Systems

Anthropic; San Francisco, New York, Seattle (CA, NY, WA); Hybrid; USD 320,000 - 405,000; Full time

Job summary

Anthropic is seeking an Operating Systems Security Engineer to harden the OS layer of our infrastructure. You will design and implement kernel‑level security controls, from hardening to runtime protection, balancing security with AI training performance.

You will work hands‑on across diverse hardware, develop OS security tooling, and collaborate with research teams to ensure secure, scalable environments for model training at scale.

Qualifications

• Expertise in Linux kernel security and hardening
• Experience designing OS-level security controls
• Proven ability to implement attestation and encryption at rest

Responsibilities

• Design hardened OS configurations for AI workloads across diverse hardware platforms
• Develop kernel security policies using SELinux, AppArmor, and custom Linux Security Modules
• Implement and maintain full‑disk encryption solutions for diverse storage systems
• Collaborate with container teams to ensure kernel-level workload isolation
• Lead OS security vulnerability analysis, patching, and hardening efforts

Skills

Linux kernel expertise

C programming

eBPF

SELinux/AppArmor

Kernel hardening

Security policy design

Containers and virtualization security

Vulnerability research

Threat modeling

OS security tooling

Education

Bachelor's degree in CS/EE

Tools

GDB

Syscall tracing tools

SELinux policy tooling

Job description

Platform Security Engineering, Operating Systems

About Anthropic

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

About the role

We're looking for an Operating Systems Security Engineer to harden and secure the OS layer of our infrastructure. You'll be responsible for designing and implementing OS‑level security controls, from kernel hardening to runtime protection, ensuring our systems can withstand sophisticated attacks while maintaining the performance required for AI model training.

This is a hands‑on role where you'll work with cutting‑edge hardware and implement novel security solutions for environments that don't exist anywhere else in the world. You'll need to balance extreme security requirements with the operational needs of researchers training models at unprecedented scale.

Key responsibilities

• Design and implement hardened OS configurations for AI workloads across diverse hardware platforms
• Minimize attack surfaces by removing as many unnecessary components as possible from kernelspace and userspace
• Develop kernel security policies using SELinux, AppArmor, and custom Linux Security Modules and runtime enforcement mechanisms
• Implement and maintain full‑disk encryption solutions for diverse storage systems
• Build security infrastructure for AI systems, research environments, and production services
• Create OS‑level attestation and integrity monitoring systems
• Apply security patches, develop patches for custom kernel modules, and kernel hardening configurations
• Design secure boot processes and trusted execution environments
• Work with container teams to ensure proper workload isolation at the kernel level
• Design privilege separation and mandatory access control policies
• Implement secure update mechanisms for OS components
• Build tooling for security configuration management and compliance verification
• Serve as a subject matter expert for OS security questions and designs
• Deep knowledge of Linux internals, including kernel subsystems and security frameworks (SELinux, AppArmor, seccomp, etc.)
• Experience with kernel hardening techniques and exploit mitigation
• Strong programming skills in C and systems programming languages
• Experience with eBPF for security monitoring and enforcement
• Understanding of virtualization and containerization security
• Track record of identifying and fixing OS‑level security vulnerabilities
• Experience with security‑focused Linux distributions

Preferred qualifications

• 5+ years of experience in operating systems security or kernel development
• Kernel development experience or contributions to Linux kernel
• Experience with real‑time or embedded operating systems
• Knowledge of hardware security features and their OS integration
• Experience with secure boot technologies
• Experience with confidential computing and memory encryption technologies (SEV, TDX, SGX)
• Background in vulnerability research, exploit development, or fuzzing
• Experience with formal methods for OS verification
• Knowledge of hardware security features and their OS integration (TPM, HSM, secure enclaves)

The annual compensation range for this role is listed below.

$320,000 - $405,000 USD

Logistics

Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience

Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

Location‑based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.

Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.

As set forth in Anthropic’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.