Staff+ Software Engineer, GRC Platform
Build the GRC platform at Anthropic by designing data pipelines, integrations, and agentic LLM workflows that automate compliance evidence collection, policy-as-code, and real-time risk reporting across cloud, identity, HR, and CI/CD systems.
Key Responsibilities
- Design and build data pipelines that aggregate risk, control, and asset information from across Anthropic's technology stack, solving hard integration problems like disparate schemas, inconsistent data quality, and unified views of posture
- Build and maintain integrations connecting our platform to cloud infrastructure, identity management, HRIS, ticketing, version control, and CI/CD systems to enable automated evidence collection and continuous validation
- Translate written policies and regulatory requirements into policy-as-code, turning static documents and spreadsheets into enforceable rules, automated checks, and continuous monitoring
- Design and deploy agentic workflows where Claude handles work that previously required manual effort, such as analyzing evidence, generating audit responses, and monitoring control effectiveness
- Develop dashboards and reporting that provide real-time visibility into risk and compliance posture for audiences ranging from engineers to executives and external auditors
- Make architectural decisions that shape how the platform grows, establishing patterns and tooling that other engineers will build on
- Partner with Security, IT, Infrastructure, and product engineering teams to make controls and evidence collection native to how Anthropic builds and ships
- Operate what you build, owning reliability and data integrity for systems that audits and executive reporting depend on
Minimum Qualifications
- 8+ years of experience building backend systems, data pipelines, or internal platforms that other teams depend on, ideally operating at tech lead level
- Systems thinker who understands how data flows between systems, where the integration points are, and what breaks when systems don't talk to each other
- Depth in either integration engineering (REST APIs, webhooks, authentication flows, event-driven architectures) or data infrastructure (warehousing, ELT/ETL, orchestration), and fluency in the other
- Proficient in Python, Go, or similar languages, and have production experience with cloud platforms (AWS, GCP, or Azure) and infrastructure-as-code
- High bar for data quality and reliability, and enjoy turning ambiguous, manual processes into simple, reliable automated systems
- Take full ownership of your work, from design through deployment and operations, and can navigate ambiguity and make sound technical decisions independently
- Product-focused approach to platform work and care about building tools internal customers love to use
- Excited to build with LLMs as system components, designing agentic workflows, evaluating their outputs, and making them reliable enough for high-stakes use
Preferred Qualifications
- Experience in domains where engineering meets regulation, such as privacy engineering, data governance, fintech, healthcare, or trust and safety
- Experience designing and shipping LLM-based or agentic automation in production or operational contexts
- Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA, FedRAMP) or GRC platforms (ServiceNow, Vanta, Drata, OneTrust)
- Prior experience at high-growth startups, building processes and systems that scale
Security Controls Assurance Lead
Lead security controls assurance for AI systems, defining control frameworks and requirements for autonomous AI operators while collaborating with engineering to validate implementations against compliance standards.
Staff+ Security Engineer, Risk Engineering
Lead complex security risk initiatives end-to-end, building AI-native risk quantification and automation platforms. Requires 8+ years in software or security engineering with deep expertise across security domains and strong programming skills.
Staff+ Software Engineer, Privacy
Designs and implements privacy-preserving architectures for AI systems, builds privacy infrastructure, and leads threat modeling to protect user data at scale. Requires deep privacy engineering expertise, production systems experience in Python/Go, and familiarity with regulations like GDPR/CCPA.
Software Engineer, Security Observability
Build scalable systems and data pipelines for security observability, enhancing detection, forensics, and compliance. Requires strong engineering in Python/Golang, Terraform, Azure, and data pipelines with a generalist SRE mindset.
Software Engineer, Security
Embeds security into product development by partnering with teams on threat modeling, implementing controls like auth and input validation, building automation tools, and mitigating AI-specific risks in a collaborative environment.