SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 270,000 - 345,000 / annual
Anthropic is seeking a Security Risk Analyst to join its Security Risk team, which is responsible for identifying, prioritizing, and driving treatment of the company's most important security risks. The team is rebuilding risk management as an engineering function, using automation, quantitative risk analysis, and AI-native platforms to enable leadership decision-making.
In this role, you will take risk questions from leadership and partner teams and drive them to clear decisions. Sometimes this involves fast, structured qualitative assessment; other times it requires deep FAIR-based quantitative analysis. You will bring leadership a clear position, articulate tradeoffs, and honestly communicate uncertainty, then defend your analysis under challenge.
Key responsibilities include:
- Enable leadership and partner teams to make risk-informed decisions by taking ambiguous risk questions and driving them to documented decisions with clear communication of quantitative and qualitative tradeoffs
- Lead quantitative analysis of the company's top security risk scenarios using FAIR methodology, calibrated estimation, and simulation, working with system engineers and presenting results in actionable terms for leadership
- Partner with Security Engineering to assess threat scenarios and control effectiveness, ensuring security investment is right-sized to actual risk and remediation is sequenced for maximum risk reduction
- Frame escalations and risk treatment decisions with clear recommendations, honest uncertainty statements, and re-evaluation triggers; pressure-test decisions with risk owners
- Shape analysis and narrative behind leadership risk reviews; help define risk appetite and the risk metrics the organization should measure
- Use AI and automation to scale risk analysis while owning calibration and quality review to maintain trustworthy outputs
- Turn one-off analyses into reusable methods, templates, and training so risk analysis becomes increasingly self-service for partner teams and raises the analytical quality of the risk register
You will have a direct line to CISO-level decisions and help define what replaces conventional GRC playbooks for a company shipping frontier AI.
REQUIREMENTS:
- Owned security or technology risk analysis end-to-end (qualitative and quantitative) with demonstrated impact on decisions (funding calls, launch decisions, remediation sequences, or documented acceptances)
- Hands-on FAIR-style quantification experience, including scenario decomposition, calibrated estimation, and Monte Carlo simulation in Python, R, or spreadsheet tooling, with results briefed to decision makers
- Ability to thrive in ambiguity: frame moving questions into analyzable problems, pick appropriate depth, and drive to decisions rather than reports
- Ability to assign defensible severity and likelihood to ambiguous problems, state uncertainty honestly, and adjust positions when evidence changes
- Technical security depth sufficient to decompose attack paths with security engineers and be credible in technical discussions
- Ability to compress complex risk positions into concise executive summaries, make tradeoffs explicit, and defend under pointed questions
- Daily use of Claude or other LLMs as working tools with critical review of model output
- Low ego, collaborative approach; builds credibility through work quality; cares about AI safety and security risk's role in it
STRONG CANDIDATES MAY ALSO HAVE:
- Applied FAIR-CAM or other structured approaches to control effectiveness and attack path modeling
- Built or operated a cyber risk quantification program, or converted quantitative analysis into tooling, templates, or training for others
- Helped define risk appetite or tolerance thresholds that organizations actually used for decision-making
- Background in security engineering, detection, threat intelligence, actuarial science, or decision science
- Familiarity with security risks specific to AI systems (goal/intent modification, etc.) and how they change traditional threat models
Minimum education: Bachelor's degree or equivalent combination of education, training, and professional experience in a field relevant to the role. Years of experience will correlate with internal job level requirements.
