Skip to main content
CareerApp

Platform Security Engineer, OpenBMC

Menlo Ventures Portfolio

New York, NY · Senior

$320,000 – $405,000

Listed on Menlo Ventures Portfolio’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role leads the design and security hardening of server management firmware across Anthropic's infrastructure, working on both production features and protection against sophisticated attacks. It suits experienced firmware security engineers who can own the full stack from hardware interfaces through secure boot and attestation.

Our summary, not Menlo Ventures Portfolio’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Cross-functional leadership and direction-setting skills
  • Hands-on OpenBMC/BMC firmware experience on x86 and/or Arm from bring-up through production
  • Proficiency with D-Bus/sdbusplus
  • Strong C/C++ and Python skills
  • Deep Linux user-space and kernel fundamentals
  • Yocto/OpenEmbedded proficiency
  • Security mindset applied to firmware design
  • Upstream contributions to OpenBMC, U-Boot, DMTF, or OCP
  • Working knowledge of out-of-band and in-band management and DMTF specifications
  • Strong debugging and track record of shipping reliable, well-tested code
  • Clear communication across internal teams and external vendors
  • Ability to work effectively across hardware and software boundaries
  • Knowledge of NIST SP 800-193, 800-147, and 800-155 firmware security guidelines

Nice to have

  • 8+ years of systems security experience with at least 5 years in firmware and hardware security
  • Experience with hardware roots of trust and attestation technologies (Caliptra, OCP S.A.F.E., TPM/HRoT, SPDM)
  • Memory-safe systems code in Rust or Zig
  • Firmware vulnerability research, reverse-engineering, or fuzzing experience
  • Previous work with AI/ML infrastructure security

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.