Security Data Engineer

Anthropic•San Francisco, CA

18h•Hybrid

About The Position

Anthropic is hiring a Security Data Engineer to build and operate the data systems that secure its data center sites, hardware, and the people and vendors who interact with them. The role owns component-level hardware inventory and chain-of-custody records, software that captures events at sites and on hosts, continuous control monitoring, and the calculations used to determine what each site is cleared to run. The engineer sets architecture, defines schemas and interfaces with source-system owners, operators, and vendors, and builds and operates pipelines, stores, and tools. The aim is to continuously verify custody, access, and evidence using records, tools, and AI agents, with an emphasis on simple, standard, verifiable controls. The position works with DCSE, security monitoring platform engineers, compute and data center operations teams, and data center operators, hardware vendors, and logistics providers. It is based in San Francisco, with US remote applicants considered, and requires regular travel to data center sites, which are critical infrastructure. Anthropic uses Claude throughout its engineering workflow and expects the successful candidate to do so as well.

Requirements

Have designed and operated production data systems, including relational schemas, change data capture, batch or streaming pipelines, and related services, while maintaining correctness through coverage measurement, source reconciliation, silence alerts, and resilience to corrupted or lost records.
Have integrated with systems outside their control, such as inventory tools, ticketing systems, or vendor APIs, and built data models that outlast individual source systems.
Have shipped software that runs outside a central service, such as host agents, site-local services, or edge collectors, and maintained its correctness in the field; alternatively, have built metrics used by a team to make decisions and defended them when challenged.
Have hands-on experience with data about physical assets or security controls, such as a hardware fleet, data center or supply-chain inventory, asset custody, or security/compliance control and evidence data.
Read and review other people's code and build with AI coding agents using Git and code review.
Own a domain end to end, including setting the approach, designing and building with dependent teams and vendors, and operating it as a system people use every day.
Write SQL and at least one general-purpose programming language well.
Bachelor's degree or an equivalent combination of education, training, and/or experience.
Relevant field of study demonstrated through coursework, training, or professional experience.

Nice To Haves

Experience with asset management, supply-chain, or warehouse systems where serialized tracking and custody transfer are central.
Experience building continuous control monitoring or security/compliance program metrics, or producing evidence accepted by an assessor, for example against NIST SP 800-53, ISO 27001, or SOC 2.
Experience with risk or posture scoring that combines control results, findings, and other evidence into a measure used for decisions.
Familiarity with data center hardware lifecycle from receipt to decommissioning and with sites and parties outside one's control, such as colocation, cloud or GPU cloud operators, hardware manufacturers, and logistics providers.
Experience running software across many hosts or remote sites with versioned rollout and a way to determine whether each copy is still reporting.
Experience building AI agents or automation that replaced recurring manual work.

Responsibilities

Own the component-level hardware inventory and chain-of-custody record, including its data model, pipelines joining inventory and custody events from multiple source systems, record change history, and tamper-evident stores.
Build tools and AI agents for reconciliation, audit evidence exports, and custody checks, replacing recurring manual reviews where possible.
Build custody workflows and site- and host-level software to capture events such as receipt, movement, data wiping, and decommissioning, and enforce authorization to record them.
Own pipelines that turn check outcomes, assessment results, and findings into per-control and per-site measures over time against relevant compliance frameworks.
Own posture calculations that determine what each site is cleared to run.
Build data coverage checks, source reconciliation, and alerts for silent or drifting feeds so missing or incorrect records are caught promptly.
Own retention and access controls for records.
Agree schemas and interfaces with security monitoring platform engineers, and build query surfaces and reports for the team, site leads, and leadership.
Set the technical approach, build systems with teams and vendors whose systems they depend on, and operate the resulting systems for daily use.