Staff+ Software Engineer, Safeguards Evals
Anthropic is hiring a Staff+ Software Engineer, Safeguards Evals in San Francisco and Seattle, United States. It pays $320k-$485k a year and Level rates it ; you can apply on Anthropic.
Level's read on this job
- Level rates this software engineer role Builds AI ●●●●: the job is building AI systems.
- Pay on this posting starts 91% higher than the typical software engineer posting on Level.
- The posting mentions visa sponsorship.
- The posting mentions prompt engineering, AI safety and AI research among its tools and skills.
- Anthropic has 674 other open roles on Level.
AI in this role
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
How do we know whether a model is safe - and how do we know whether the systems we built to catch misuse actually catch it?
Anthropic answers both questions with evaluations. We measure model behavior across misuse, prompt injection, and user well-being to inform training and deployment decisions. We also use AI to investigate potential misuse of Claude, analyzing real-world traffic to surface bad actors and emerging threats that drive enforcement actions. Neither is worth much unless the evaluations behind them are representative, robust, and trustworthy.
This role builds the methods and infrastructure that make them so. Sitting at the intersection of applied ML research and engineering, you'll design experiments to improve how we evaluate both model behavior and the agentic systems that govern it, build datasets that represent real abuse rather than clean approximations of it, and ship those methods into the pipelines that gate model training, agent changes, and launch decisions.
Responsibilities
Evaluation research and methodology. Design and run experiments to improve evaluation quality — developing methods to generate representative test data, simulate realistic user behavior, and validate grading accuracy. Research how different factors (multi-turn conversations, tools, long context, user diversity) impact model safety behavior. Analyze evaluation coverage to identify measurement gaps, and evolve evals so they remain unsaturated and high-signal as model and agent capabilities advance.
Agentic investigation evals. Build and own the evaluation harness for an agentic investigation system — defining metrics, test cases, and grading approaches for a complex, long-horizon agent. Measure agent performance end-to-end (detection precision and recall, investigation quality, robustness) and drive hill-climbing on the hardest harm areas. Construct RL environments to improve Claude's safety investigation capabilities.
Datasets grounded in real harm. Construct high-quality eval datasets representing real-world misuse across harm areas such as cyber attacks, bio weapons, and influence operations, drawing from both real traffic patterns and synthetic generation. Collaborate with Policy and Enforcement to translate observed harm patterns into measurable evaluations.
Productionization and tooling. Ship successful research into evaluation, regression, and release pipelines that run during model training, on every agent change, prompt update, and underlying model upgrade, and beyond launch. Build tooling that enables policy experts to author, run, and iterate on evaluations without engineering support. Surface findings to research and training teams to drive upstream model improvements.
Minimum qualifications
- Experience building and maintaining data pipelines
- Experience working with LLMs and a working understanding of their capabilities and failure modes — especially agentic systems with tool use and multi-step reasoning
- Strong data analysis skills — you can draw reliable insights from large datasets
- Ability to move fluidly between research prototyping and production-quality code
- Ability to translate ambiguous problems into concrete, testable experiments
- Care deeply about AI safety and want your work to have real impact
Preferred qualifications
- 8+ years of industry software engineering or ML engineering experience
- Expertise in building or contributing to LLM or agent evaluation frameworks, benchmarks, or automated grading systems
- Extensive experience in trust and safety, content moderation, or abuse detection systems
- Experience in red teaming, adversarial testing, or jailbreak research on AI systems
- Experience with synthetic data generation or data augmentation
- Experience with distributed systems or large-scale data processing
- Experience with prompt engineering or building LLM-powered applications
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:$320,000—$485,000 USDLogistics
Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.
How we rate this
Staff+ Software Engineer, Safeguards Evals at Anthropic rates 93 out of 100 for how much of the daily work is AI. That makes it Builds AI (AI Level 4 of 4). The level is about AI in the job, not seniority.
Builds AI. The job is building AI systems.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Also common in software engineer jobs at this level
Pay
- This job starts at
- $320k
- Typical software engineer job
- $168k
This posting starts 91% above the typical software engineer job. See software engineer jobs
Questions you could be asked
- How do you structure and test a prompt to get consistent output from a language model?
- How do you think about the risk of an AI system in this kind of role failing silently?
- Tell me about a research question you investigated. What did you find?
- How would you decide a model or AI system is ready to ship?
- Tell me about a time a model underperformed in production. How did you find out, and what did you change?
Adapt your resume
- List these exact terms on your resume: Prompt engineering, AI Safety, and AI Research. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Lead with what you built, trained or shipped. This role is judged on the AI system itself, not the tools around it.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new software engineer jobs (Builds AI ●●●●) by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Software Engineering roles that build AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step