Staff / Senior Data Center Security Engineer

About this role

Engineer end-to-end security controls for Anthropic-operated and partner data centers, covering facilities, hardware custody, media, personnel, and vendors. Build automation and tools that continuously verify controls and maintain assessment-ready evidence. The role includes regular travel to data center sites and may involve on-call security response.

About the company

Anthropic builds reliable and interpretable AI systems, including the Claude family of models, for businesses and developers. The company focuses on AI safety research and practical AI assistants for enterprise and consumer use.

The team

Data Center Security Engineering (DCSE)

Stack

What you'll do

• Own security control domains end to end, from design through implementation and verification.
• Build tools, automation, and AI agents for evidence collection, access reviews, asset tracking, and partner intake.
• Review site, lease, and vendor security; define requirements and verify remediation.
• Write version-controlled security requirements and procedures that partners can implement and assessors can test.
• Assess sites and suppliers, document deviations, and engineer compensating controls.
• Maintain current compliance evidence mapped to relevant frameworks.
• Respond to site security events and improve controls based on incident findings.

What we're looking for

• Have designed, implemented, and verified a security control domain end to end.
• Read and review code, design data systems for security tooling, and build automation using Git and code review.
• Hands-on security experience in data centers, critical infrastructure, or large hardware fleets.
• Applied a control framework such as NIST SP 800-53, ISO 27001, or SOC 2 and produced assessment evidence.
• Write testable requirements that specify what must be true, how it is verified, and what evidence demonstrates compliance.

Nice to have

• Experience across multiple security domains and with cloud, colocation, or GPU cloud operators.
• Experience with federal NIST SP 800-53 assessments, NIST SP 800-161 supply-chain guidance, or NIST SP 800-88 media sanitization.
• Built GRC or evidence automation, including automated checks, asset tracking, assessment pipelines, or docs-as-code workflows.
• Handled physical-site incident response or worked in live data halls and active construction sites.
• Experience drafting contract security language with legal and procurement teams.
• International site experience involving screening, staffing restrictions, data residency, or export controls.
• Built AI agents or automation that replaced recurring manual security work.

Benefits

• Generous vacation and parental leave
• Flexible working hours
• Optional equity donation matching