Role Overview
The Platform Security Engineer, OpenBMC position at Anthropic involves joining a founding server management firmware team based in San Francisco, CA, New York City, NY, or Seattle, WA. This role suits professionals experienced in firmware development and hardware security who want to secure infrastructure for advanced AI systems.
Key Responsibilities
Design, build, and ship OpenBMC firmware and manageability features for x86 and Arm platforms, including GPUs, from initial bring-up through full production using Yocto/OpenEmbedded.
Construct management stacks relying on DMTF and OCP standards like MCTP, PLDM, SPDM, Redfish, RDE, along with IPMI/KCS for telemetry, inventory, logging, and sensors.
Implement communications between BMC and BIOS or hosts utilizing eSPI/LPC, along with power, thermal, and fan management.
Manage the hardware and firmware boundary covering I2C/I3C, SPI, PCIe, SMBus, device trees, U-Boot, and Linux.
Own the entire BMC security posture, incorporating secure and measured boot, roots of trust, attestation, authenticated updates, and rollback protection.
Lead threat modeling, execute secure design reviews, and run coordinated vulnerability disclosures with vendors and the upstream community.
Create verification tooling that features static analysis, fuzzing, firmware extraction, and CI gating.
Requirements
Strong technical cross-functional leadership capabilities and direction-setting skills.
Hands-on background with OpenBMC or BMC firmware on x86 or Arm architectures, spanning bring-up to production using D-Bus/sdbusplus.
Proficiency in C, C++, and Python, alongside deep fundamentals in Linux user-space and kernel environments, plus Yocto/OpenEmbedded experience.
A security mindset integrated directly into firmware engineering rather than applied afterward.
Upstream contributions to projects like OpenBMC, U-Boot, DMTF, or OCP.
Practical knowledge of in-band and out-of-band management, relevant DMTF specifications, and connected device interfaces.
Strong debugging skills and a proven track record of delivering reliable, well-tested code.
Clear communication abilities across internal teams and external vendors, with an aptitude for working across hardware and software boundaries.
Working knowledge of NIST firmware security guidelines and hardware security frameworks, specifically SP 800-193 and 800-147/155.
A Bachelor’s degree in a relevant field of study or an equivalent combination of education, training, and professional experience.
Nice to Have
8+ years of total experience in systems security, with at least 5 years dedicated specifically to hardware and firmware security across bootloaders, firmware, and OS-level security.
Familiarity with hardware roots of trust and attestation technologies such as Caliptra, OCP S.A.F.E., TPM/HRoT, and SPDM.
Experience writing memory-safe systems code utilizing Rust or Zig.
Background in firmware vulnerability research, reverse-engineering, or fuzzing.
Previous involvement with AI and machine learning infrastructure security.
Skills and Tools
Python
Rust
C++
OpenBMC
Yocto/OpenEmbedded
Linux
DMTF and OCP standards
Salary and Benefits
Annual base salary range of $320,000 to $405,000 USD.
Competitive compensation and benefits package.
Optional equity donation matching.
Generous vacation time and parental leave.
Flexible working hours and a collaborative office environment.
Visa sponsorship support provided when possible.
About the Company
Anthropic operates as a public benefit corporation focused on building reliable, interpretable, and steerable AI systems that remain safe and beneficial for society. The organization approaches AI research as an empirical science, valuing large-scale collaborative efforts to advance long-term goals in trustworthy AI.
How to Apply
Interested candidates should apply directly on the official Anthropic careers page.
