Security Engineer - Threat Intel (AI)

Location: New York City, San Francisco, or Washington, DC; remote-friendly with travel required. Staff are expected to work from one of the offices at least 25% of the time.

Annual salary: $320,000–$405,000 USD

Company

Anthropic develops reliable, interpretable, and steerable AI systems intended to be safe and beneficial for users and society.

What you will do

• Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the technology sector.
• Build tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise.
• Develop intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, turning findings into durable detections.
• Analyze malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals.
• Partner with Detection Engineering and Incident Response on detection rules, hunting hypotheses, and incident context.
• Curate external intelligence, contribute to threat models, and maintain intelligence-sharing relationships with peer companies, ISACs, and government partners.

Requirements

• 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis involving sophisticated adversaries.
• Deep knowledge of nation-state or advanced criminal threat actors, including their tooling, infrastructure, tradecraft, and targeting.
• Production-quality Python or similar programming experience, including automation and data pipelines.
• Experience with malware analysis, passive DNS, certificate pivoting, NetFlow, and log analysis.
• Experience authoring detection logic with YARA, Sigma, Snort/Suricata, or SIEM-native queries.
• Bachelor’s degree or equivalent education, training, and professional experience in a relevant field.

Nice to have

• Experience defending cloud-native and research-heavy environments using AWS, GCP, Kubernetes, ML infrastructure, or developer tooling and supply chains.
• Experience tracking sophisticated or state-sponsored adversaries in a threat intelligence role.
• Experience applying LLMs or other AI tooling to intelligence collection, enrichment, and analysis.
• Public research, conference talks, or open-source contributions in the cyber threat intelligence space.

Culture & Benefits

• Collaborative environment focused on large-scale AI research and long-term AI safety.
• Flexible working hours and office-based collaboration.
• Generous vacation and parental leave.
• Competitive compensation, optional equity donation matching, and office facilities.
• Visa sponsorship is available, with immigration lawyer support, subject to role and candidate eligibility.