SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Anthropic is building reliable, interpretable, and steerable AI systems. As the company's models grow more capable, so does the interest from those seeking to attack or misuse them. The Detection and Response (D&R) team is responsible for spotting threats and responding to incidents across every layer of Anthropic's technology stack.
This is an early-stage team, and you will help build detection and response capabilities from the ground up while working closely with security and research teams. The role offers significant opportunity to shape the direction of a critical security function at a high-growth AI company.
Key responsibilities include:
- Leading incident response across multiple domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack
- Building and deploying tooling, including tools that leverage large language models, to improve threat detection and response
- Creating and tuning detections, playbooks, and workflows to catch and respond to incidents quickly
- Reviewing incident response metrics and procedures, and driving continuous improvements
- Collaborating across security and engineering teams
- Participating in an on-call rotation
This role requires strong technical depth, the ability to lead projects with minimal guidance, and excellent communication skills. You will work in a collaborative environment where research discussions are frequent and impact-driven work is valued.
Requirements:
Minimum qualifications:
- Experience handling security incidents and investigating anomalies as part of a team
- Working knowledge of EDR, SIEM, SOAR, or similar security tooling
- Solid understanding of cloud environments and operations
- Experience working with engineering teams in a SaaS environment
- Proficiency with a scripting language such as Python and query languages such as SQL
- Strong communication and collaboration skills
- Ability to lead projects with little guidance
- Ability to pick up new languages and technologies quickly
- Bachelor's degree or equivalent combination of education, training, and/or experience in a field relevant to the role
Preferred qualifications:
- 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience
- Security operations or investigations involving large-scale Kubernetes environments
- Experience analyzing attack behavior and prototyping high-quality detections
- Experience with threat intelligence, malware analysis, infrastructure as code, or forensics
- Experience contributing to a high-growth startup environment
The company offers visa sponsorship and maintains a hybrid policy requiring staff to be in office at least 25% of the time, though some roles may require more.
