Staff+ Software Engineer, GRC Platform

Anthropic•Seattle, WA

12h•Hybrid

About The Position

Anthropic is seeking an experienced software engineer to build the platform behind governance, risk, and compliance (GRC) at Anthropic. Compliance information is spread across numerous systems, including cloud infrastructure, identity providers, HR platforms, and code repositories. The role involves creating pipelines, integrations, and services to consolidate this data, enabling automated checks, real-time dashboards, and evidence for decision-making, compliance obligations, and market expansion. As an early team member, you will collaborate with stakeholders across Security, IT, Engineering, Privacy Engineering, Legal, Finance, and more to transform manual compliance processes into scalable, reliable systems. You will lead projects end-to-end and utilize Claude through agentic workflows for evidence collection, analysis, and continuous monitoring. Experience in building internal platforms, data pipelines, or privacy systems is beneficial, and a compliance background is not required.

Requirements

8+ years of experience building backend systems, data pipelines, or internal platforms that other teams depend on, ideally operating at tech lead level.
Systems thinker who understands how data flows between systems, where the integration points are, and what breaks when systems don't talk to each other.
Depth in either integration engineering (REST APIs, webhooks, authentication flows, event-driven architectures) or data infrastructure (warehousing, ELT/ETL, orchestration), and fluency in the other.
Proficient in Python, Go, or similar languages.
Production experience with cloud platforms (AWS, GCP, or Azure) and infrastructure-as-code.
High bar for data quality and reliability, and enjoy turning ambiguous, manual processes into simple, reliable automated systems.
Full ownership of work, from design through deployment and operations, and ability to navigate ambiguity and make sound technical decisions independently.
Product-focused approach to platform work and care about building tools internal customers love to use.
Excited to build with LLMs as system components, designing agentic workflows, evaluating their outputs, and making them reliable enough for high-stakes use.

Nice To Haves

Experience in domains where engineering meets regulation, such as privacy engineering, data governance, fintech, healthcare, or trust and safety.
Experience designing and shipping LLM-based or agentic automation in production or operational contexts.
Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA, FedRAMP) or GRC platforms (ServiceNow, Vanta, Drata, OneTrust).
Prior experience at high-growth startups, building processes and systems that scale.

Responsibilities

Design and build data pipelines that aggregate risk, control, and asset information from across Anthropic's technology stack, solving hard integration problems like disparate schemas, inconsistent data quality, and unified views of posture.
Build and maintain integrations connecting our platform to cloud infrastructure, identity management, HRIS, ticketing, version control, and CI/CD systems to enable automated evidence collection and continuous validation.
Translate written policies and regulatory requirements into policy-as-code, turning static documents and spreadsheets into enforceable rules, automated checks, and continuous monitoring.
Design and deploy agentic workflows where Claude handles work that previously required manual effort, such as analyzing evidence, generating audit responses, and monitoring control effectiveness.
Develop dashboards and reporting that provide real-time visibility into risk and compliance posture for audiences ranging from engineers to executives and external auditors.
Make architectural decisions that shape how the platform grows, establishing patterns and tooling that other engineers will build on.
Partner with Security, IT, Infrastructure, and product engineering teams to make controls and evidence collection native to how Anthropic builds and ships.
Operate what you build, owning reliability and data integrity for systems that audits and executive reporting depend on.