Назад
4 мСсяца Π½Π°Π·Π°Π΄

Staff+ Application Security Engineer (M&A)

320Β 000 - 485Β 000$
Π€ΠΎΡ€ΠΌΠ°Ρ‚ Ρ€Π°Π±ΠΎΡ‚Ρ‹
hybrid
Π’ΠΈΠΏ Ρ€Π°Π±ΠΎΡ‚Ρ‹
fulltime
Π“Ρ€Π΅ΠΉΠ΄
senior
Английский
b2
Π‘Ρ‚Ρ€Π°Π½Π°
US
Вакансия ΠΈΠ· списка Hirify.GlobalВакансия ΠΈΠ· Hirify Global, списка ΠΌΠ΅ΠΆΠ΄ΡƒΠ½Π°Ρ€ΠΎΠ΄Π½Ρ‹Ρ… tech-ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΉ
Для мэтча ΠΈ ΠΎΡ‚ΠΊΠ»ΠΈΠΊΠ° Π½ΡƒΠΆΠ΅Π½ Plus

ΠœΡΡ‚Ρ‡ & Π‘ΠΎΠΏΡ€ΠΎΠ²ΠΎΠ΄

Для мэтча с этой вакансиСй Π½ΡƒΠΆΠ΅Π½ Plus

ОписаниС вакансии

ВСкст:
/
TL;DR
Staff+ Application Security Engineer (M&A): Establishing the security due diligence and integration function for acquisitions with an accent on assessing target security postures and automating integration workflows. Focus on building repeatable risk models and using LLMs to scale security assessments for unfamiliar codebases.

Location: Hybrid (Must be based in the US). Office locations: San Francisco, CA; Seattle, WA; New York City, NY. Expectation to be in-office at least 25% of the time.

Salary: $320,000 - $485,000 USD

Company

Anthropic is a public benefit corporation focused on creating reliable, interpretable, and steerable AI systems.

What you will do

  • Lead pre-close security due diligence for acquisitions, including threat modeling and risk readouts for leadership.
  • Drive post-close integration by implementing SAST/DAST coverage and onboarding acquired assets to vulnerability management systems.
  • Formalize the M&A security playbook, including risk-scoring models and diligence runbooks.
  • Develop Claude-powered tooling to automate repetitive parts of the diligence and integration process.
  • Collaborate with corporate development, legal, and engineering stakeholders across different organizations.
  • Contribute to core AppSec projects and the team's operational on-run rotation, including incident response and bug bounty.

Requirements

  • Hands-on experience in application and infrastructure security within cloud and containerized environments.
  • Ability to rapidly assess unfamiliar architectures and produce prioritized risk assessments for non-security audiences.
  • Production-quality coding skills in Python, Go, Rust, or TypeScript.
  • Practical threat-modeling and vulnerability-identification experience.
  • Ability to operate with high autonomy and handle confidential, time-sensitive context.
  • Must be based in the US (San Francisco, Seattle, or New York City).

Nice to have

  • 7+ years of experience in AppSec, security consulting, or architecture.
  • Prior experience with M&A security due diligence or third-party assessments.
  • Experience scaling SAST/DAST, bug bounty, or vulnerability management.
  • Track record of building security automation tooling.
  • Familiarity with using LLMs as a core part of a security workflow.

Culture & Benefits

  • Competitive compensation and benefits with optional equity donation matching.
  • Generous vacation and parental leave.
  • Flexible working hours and collaborative office spaces.
  • Visa sponsorship availability.
  • High-impact research environment focusing on steerable and trustworthy AI.

Π‘ΡƒΠ΄ΡŒΡ‚Π΅ остороТны: Ссли Ρ€Π°Π±ΠΎΡ‚ΠΎΠ΄Π°Ρ‚Π΅Π»ΡŒ просит Π²ΠΎΠΉΡ‚ΠΈ Π² ΠΈΡ… систСму, ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡ iCloud/Google, ΠΏΡ€ΠΈΡΠ»Π°Ρ‚ΡŒ ΠΊΠΎΠ΄/ΠΏΠ°Ρ€ΠΎΠ»ΡŒ, Π·Π°ΠΏΡƒΡΡ‚ΠΈΡ‚ΡŒ ΠΊΠΎΠ΄/ПО, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡ‚Π΅ этого - это мошСнники. ΠžΠ±ΡΠ·Π°Ρ‚Π΅Π»ΡŒΠ½ΠΎ ΠΆΠΌΠΈΡ‚Π΅ "ΠŸΠΎΠΆΠ°Π»ΠΎΠ²Π°Ρ‚ΡŒΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡˆΠΈΡ‚Π΅ Π² ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΊΡƒ. ΠŸΠΎΠ΄Ρ€ΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β†’