Software Security Engineering Manager, Secure Frameworks
Lead the Secure Frameworks Research team at Anthropic to build high-leverage security libraries and frameworks (cryptographic, serialization, authorization) that prevent vulnerabilities in AI model development. Manage engineers, drive adoption across teams, and balance security rigor with development velocity; requires 5+ years security/software engineering and 3+ years managing security teams.
About the job
Key Responsibilities
- Design frameworks and libraries that enable secure handling of sensitive data including model weights, customer data, and training datasets.
- Own what you build completely; ensuring outstanding user experience, proactive monitoring, and responsive support.
- Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond your team.
- Partner with product, research, and infrastructure teams, as well as other Security teams to ensure frameworks integrate smoothly with lower-layer security controls.
- Make strategic decisions about which frameworks to build based on security risk and translate into prioritized roadmaps.
- Define success metrics around framework adoption and impact - the team succeeds when engineers naturally reach for Secure Frameworks' tools rather than building security solutions from scratch.
- Manage and grow a team of engineers to deliver high-impact projects that balance security rigor with development velocity.
Minimum Qualifications
- 3+ years managing security engineering teams with proven track record of team productivity.
- 5+ years hands-on security and software engineering experience.
- Deep expertise in securing complex architectures, threat modeling, and risk assessment with ability to evaluate security tradeoffs and make risk-based decisions.
- Strong cross-functional collaboration skills, balancing security requirements with developer experience and velocity.
- Clear and persuasive communicator in both writing and verbal settings.
- Passionate about building diverse, high-performing teams and growing engineers in a fast-paced environment.
- Low ego, high empathy, and have a track record as a talent magnet.
- Experience working with technical internal customers.
- Familiarity with AI safety concepts and frameworks.
Nice-to-Haves
- Bachelor’s degree or equivalent combination of education, training, and/or experience in a relevant field.
- Experience with cryptographic frameworks, secure serialization, and authorization systems.
Skills
Security Engineering, Threat Modeling, Risk Assessment, Cryptographic Frameworks, Secure Serialization, Authorization Systems, Team Management, Cross-Functional Collaboration, Ai Safety
Similar jobs
Security Engineering jobs
Anthropic
San Francisco, CALeads technical SOX controls assurance for financially significant systems, translating audit requirements into engineering acceptance criteria and continuous monitoring. Requires ITGC and SOX 404 expertise, strong engineering fluency, programming ability, and cross-functional collaboration with Finance, Engineering, and auditors.
Mercor
San Francisco, CA
Leads the company’s security GRC function, owning SOC 2, ISO 27001, enterprise audits, third-party risk, policy governance, and automated evidence workflows. Requires 7+ years of GRC or audit experience, end-to-end SOC 2 and ISO 27001 ownership, and strong security tooling expertise.
Anthropic
San Francisco, CAOwns DRTM adoption, attestation, and platform hardening across x86 and ARM infrastructure, working across firmware, bootloaders, kernels, hardware, and silicon security. The role requires deep systems-security experience, upstream Linux or firmware contributions, and strong vendor and OEM leadership.
Anthropic
Washington, DCLeads cyber-focused AI misuse enforcement, managing analysts and contractors while developing detection and mitigation strategies for attacks, malware, and exploitation. Requires people management, cybersecurity expertise, high-volume abuse enforcement, data analysis with SQL or Python, and cross-functional risk communication.
OpenAI
San Francisco, CA
Defines the security architecture for a next-generation operating system, spanning trust boundaries, hardware-backed protections, isolation, secure updates, and AI-agent guardrails. The role requires deep privileged-systems expertise, systems programming ability, and experience securing platforms across hardware, firmware, and software.