Platform Security Engineer, OpenBMC

Anthropic is an AI safety company building reliable, interpretable, and steerable AI systems. We are standing up a founding team to own the server management firmware across our fleet. As one of the first engineers, you will handle production firmware and manageability features (board bring-up through production) and harden that firmware against sophisticated adversaries, with security as a first-class constraint.

Key responsibilities include designing and shipping OpenBMC firmware for x86 and Arm platforms using Yocto/OpenEmbedded; building the management stack on DMTF/OCP standards (MCTP, PLDM, SPDM, Redfish, RDE) and IPMI/KCS; implementing BMC-to-BIOS communications, eSPI/LPC, thermal/fan/power management; working the hardware/firmware boundary (I2C/I3C, SPI, PCIe, SMBus, device trees, U-Boot, Linux); owning the BMC security posture (secure boot, root of trust, attestation, authenticated update, rollback protection); leading threat modeling and secure design reviews; and building verification tooling (static analysis, fuzzing, firmware extraction, CI gating).

Minimum qualifications include strong technical cross-functional leadership, hands-on OpenBMC/BMC firmware experience on x86/Arm, strong C/C++ and Python, deep Linux fundamentals, Yocto/OpenEmbedded proficiency, a security mindset, upstream contributions to OpenBMC/U-Boot/DMTF/OCP, working knowledge of out-of-band/in-band management and DMTF specs, strong debugging and shipping record, clear communication, ability to work across hardware/software boundaries, and knowledge of NIST firmware security guidelines (SP 800-193, 800-147/155).

Preferred qualifications include 8+ years in systems security with 5+ years in firmware/hardware security, hardware roots of trust (Caliptra, OCP S.A.F.E., TPM/HRoT, SPDM), memory-safe systems code in Rust or Zig, firmware vulnerability research/reverse-engineering/fuzzing, and previous work with AI/ML infrastructure security.

Annual Salary: $320,000—$405,000 USD. Minimum education: Bachelor’s degree or equivalent. Location-based hybrid policy: all staff in one of our offices at least 25% of the time. Visa sponsorship: We do sponsor visas.