Skip to main content
CareerApp

Platform Security Engineer, DRTM / Secure Launch

Menlo Ventures Portfolio

New York, NY · Senior

$320,000 – $405,000

Listed on Menlo Ventures Portfolio’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role builds Dynamic Root of Trust for Measurement (DRTM) security across Anthropic's AI infrastructure, working at the firmware and kernel layers to implement attestation and isolation across x86 and ARM platforms. It suits experienced systems security engineers comfortable at the hardware-firmware boundary who want to lead upstream open-source work in Linux and firmware communities.

Our summary, not Menlo Ventures Portfolio’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Deep hands-on experience with measured boot and roots of trust (DRTM, SRTM, TPM)
  • Strong C and assembly with deep Linux kernel and early-boot fundamentals
  • Track record of landing non-trivial work upstream in Linux, TianoCore, GRUB or comparable community
  • Comfort at the hardware-firmware boundary with platform-level debugging (JTAG, serial, bring-up)
  • Strong technical cross-functional leadership with external vendors and OEMs
  • Clear written communication for specifications and design documentation
  • Knowledge of NIST firmware security guidance (SP 800-193, 800-147/155)

Nice to have

  • 8+ years in systems security with at least 5 years on firmware, bootloader, and OS-level security
  • Existing maintainership or subsystem ownership in Linux or standing in TCG, UEFI Forum, or OCP communities
  • Confidential computing implementation experience (TDX, SEV-SNP, ARM CCA)
  • Hardware roots of trust beyond TPM (Caliptra, OCP S.A.F.E., SPDM)
  • Memory-safe systems code in Rust
  • Firmware vulnerability research, reverse engineering, or fuzzing experience
  • Previous work with AI/ML infrastructure security

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.