SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Anthropic is seeking a GSOC Response & Policy Program Specialist to design and implement the Global Security Operations Center's incident detection, response, and recovery framework. This is a builder's role scaling a critical program globally across all regions where Anthropic operates.
You will author the comprehensive GSOC plan and policy, including documented functions, incident severity matrices, communication templates, and service level agreements for response timing. You'll design global incident- and event-specific response protocols, producing both operator-focused playbooks and business-facing playbooks for different stakeholder audiences.
Key responsibilities include defining and obtaining approval for incident response tooling and channels; partnering with Legal, Communications, HR, and Employee Relations to align on notification thresholds and obligations before incidents occur; designing a scalable on-call rotation and call tree ensuring Incident Commander coverage never depends on a single person; driving policy socialization and securing senior leadership approval; and building and delivering training for policy implementation.
You will assist in live incident response, coordinate handoffs to appropriate Incident Commanders as incidents escalate, and serve as the standing liaison between GSOC and Crisis Management. Additional responsibilities include running after-action reviews and tabletop exercises, folding insights back into policy, and measuring compliance with established standards.
This role carries on-call requirements and after-hours availability expectations, including evenings, weekends, and holidays. You may be exposed to graphic and explicit content including violent or psychologically disturbing material in the course of incident response.
Ideal candidates have 8+ years in GSOCs, security operations, emergency/crisis management, business continuity, or incident command. You should have authored formally approved security, safety, or emergency response policies; served as Incident Commander during live incidents; and have working knowledge of ISO 22320:2018 or equivalent incident command systems (ICS/NIMS). Strong writing skills for diverse audiences (operators, business partners, executives) and comfort with document-heavy programs on tight deadlines while remaining available for live response are essential.
