Security Engineer, RF and Technical Surveillance Countermeasures

About the role

Claude is trained and served on hardware in data centers Anthropic operates and in sites partners build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it. Part of that footprint is the radio spectrum around and inside each site: what transmits there, what listens there, and what the equipment itself gives off. You'll be the engineer who owns that domain end to end: on-site RF monitoring and detection, technical surveillance countermeasures (TSCM) and emanations security, from the threat basis through the systems that make the spectrum observable, to sign-off before a site opens.

The engineering is in the monitoring and in the tooling that proves the controls hold: the sensors, receivers and their placement, the site baselines, and the detection logic that turns a rogue transmitter or an unexpected emitter into an alert an analyst trusts. External specialist partners do the hands-on sweep and measurement work; you write the scope, direct them on site and decide whether their report stands. The goal is security that runs itself: coverage, sensor health and evidence verified continuously, with tools and AI agents doing the routine triage. We favor simple, standard controls and tools that can be verified over elaborate ones. We use Claude throughout our engineering workflow and expect you to as well.

You'll work with the rest of DCSE, including its physical security systems engineers and the engineers on its security monitoring platform, with Anthropic's data center operations, construction and legal teams, and directly with site operators and landlords. The role is based in San Francisco, with remote applicants in the US considered, and involves regular travel to data center sites, which are critical infrastructure.

Key responsibilities

• On-site RF monitoring and detection: design and develop the monitoring at each site: sensor, receiver and antenna selection and placement, the spectrum monitoring architecture, site RF baselines and what keeps them current, and detections that reach the team's security monitoring platform as alerts analysts keep trusting

• Tools, automation and AI agents: build the detection and classification tooling, the instruments and software for checks between sweeps, the findings and evidence records behind them, and the agents that triage alerts and watch sensor health. When a review keeps costing people time, you build the tool or agent that retires it

• Technical surveillance countermeasures: own TSCM end to end: sweep cadence by space sensitivity, event-driven triggers such as fit-out, room turnover or an incident, scope and acceptance criteria per sweep, and findings handled with evidence and closure an assessor accepts

• Emanations security: set the posture for sites: the assessment method, zoning and separation, and shielding, filtering and protected cabling where warranted, written into the team's design and build standards so a site can build to them and an assessor can verify them

• Wireless and device policy by zone: detect which radios are actually present where (cellular, Wi-Fi, Bluetooth, IoT, trunked radio) and produce the evidence that the policy holds on the floor

• Specialist partners: write the scope and the deliverable standard for sweep and assessment work, direct it on site, and decide in the acceptance review whether a report stands

• New sites and leases: carry RF and emanations requirements into design reviews, lease terms and pre-opening reviews, and sign off RF and emanations, including the pre-opening sweep and assessment, before a site opens

Minimum qualifications

• Have built at least one RF monitoring or detection system end to end, from receiver and antenna choice through the software that turns captures into alerts

• Understand RF at the engineering level: propagation, modulation, spectrum analysis and antenna behavior, with hands-on use of the instruments that measure them, such as spectrum analyzers and software-defined radios

• Have planned and conducted TSCM sweeps yourself and can explain, from having done the work, what a sweep can and cannot find and how an adversary would get past it

• Have done RF security, TSCM or emanations work hands-on for data centers, critical infrastructure or a large hardware fleet

• Read and review code, design the data systems behind detection and monitoring tooling, and build automation (often with AI coding agents) using Git and code review

• Understand compromising emanations and what zoning, shielding and filtering each buy and cost, and write requirements for them that a construction team or a landlord can build to and an assessor can test

• Direct a specialist vendor without deferring to them: write the scope, check the work, reject a weak report

Preferred qualifications

• Experience assessing compromising emanations and shielding or filtering tradeoffs in a live facility, and applying a formal emanations or counter-surveillance standard, government or commercial (TEMPEST, ICD 705 style construction requirements, or a corporate equivalent)

• Have built signal classification or spectrum analysis pipelines at scale, or tuned RF detections for a security operations workflow so operators kept trusting them

• Familiarity with airspace or drone RF detection, and with where it stops and on-site monitoring starts

• Experience at sites you did not fully control: colocation or multi-tenant facilities, where the RF environment and the walls are not yours alone

• Have built AI agents or automation that replaced recurring manual security work