Security Engineer (Detection & Response)

Join Anthropic, a pioneering AI research company, as a Security Engineer specializing in Detection & Response. In this role, you will lead cybersecurity incident response efforts, develop novel tooling, optimize detections and workflows, and work cross-functionally with other security and engineering teams. You will have the opportunity to shape our security capabilities from the ground up alongside our world-class research and security teams.

• Lead cybersecurity Incident Response efforts covering diverse domains from external attacks to insider threats involving all layers of Anthropic’s technology stack.
• Develop and deploy novel tooling that may leverage Large Language Models to enhance detection, investigation, and response capabilities.
• Create and optimize detections, playbooks, and workflows to quickly identify and respond to potential incidents.
• The ability to pick up new languages and technologies quickly
• Knowledge of EDR, SIEM, SOAR, or related security tools
• Experience working with engineering teams in a SaaS environment
• Exceptional communication and collaboration skills
• 3+ years of software engineering experience, with security experience a plus and/or
• Experience handling security incidents and investigating anomalies as part of a team
• An ability to lead projects with little guidance
• A solid understanding of cloud environments and operations
• 5+ years of detection engineering, incident response, or threat hunting experience
• Experience performing security operations or investigations involving large-scale Kubernetes environments
• A high level of proficiency in Python and query languages such as SQL
• Experience analyzing attack behavior and prototyping high quality detections
• Experience with threat intelligence, malware analysis, infrastructure as code, detection engineering, or forensics
• Experience contributing to a high growth startup environment
• Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience
• Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices
• We encourage you to apply even if you do not believe you meet every single qualification