Latest AI JobsBrowse Jobs
Anthropic logo

Security Engineer - Threat Intel

AnthropicNew York City, NY; Remote-Friendly (Travel-Required) | San Francisco, CA | Washington, DC; San Francisco, CA | New York City, NYSecurity
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
22 Apr 2026
Status
Open · checked 7d ago

About this role

The Security Engineer - Threat Intel role at Anthropic involves tracking sophisticated adversaries and building operational defenses for a leading AI lab in New York, San Francisco, or Washington, DC with remote flexibility. This position is ideal for an experienced cyber threat intelligence practitioner who wants to turn raw indicators into proactive security outcomes.

Role Overview

Anthropic operates at the frontier of artificial intelligence development, drawing attention from advanced criminal networks and nation-state actors. The Threat Intelligence team operates within the Detection and Response department to anticipate threats and secure infrastructure. As a Security Engineer, the focus centers on producing actionable intelligence that directly informs security monitoring, threat hunting, and defensive strategies. This builder-oriented position offers substantial autonomy to design and implement intelligence pipelines within a collaborative environment.

Key Responsibilities

Research, monitor, and document threat actors and campaigns targeting artificial intelligence labs, cloud environments, and the technology sector.
Construct and maintain automated data pipelines to gather, enrich, and translate indicators of compromise into active detection mechanisms.
Conduct intelligence-driven threat hunts across cloud, endpoint, SaaS, and identity telemetry to uncover hidden risks.
Analyze malware, phishing infrastructure, and malicious tooling to extract behavioral patterns, indicators, and attribution details.
Collaborate closely with incident responders and detection engineers to convert intelligence data into immediate rules and hunting contexts.
Evaluate and triage incoming information from commercial feeds, open-source channels, government sources, and trusted partnerships.
Contribute to threat modeling exercises that guide enterprise security architecture and defensive investment decisions.
Cultivate and manage external intelligence-sharing relationships with industry peers, ISACs, and government agencies.

Requirements

Minimum of 5 years of hands-on professional experience in cyber threat intelligence, intrusion analysis, or threat hunting against sophisticated adversaries.
Demonstrated knowledge of advanced criminal or nation-state threat groups, including their tradecraft, infrastructure, and targeting methods.
Strong engineering capabilities, including production-quality coding in Python or similar languages to build automation and data pipelines.
Practical competency in malware analysis, log evaluation, and infrastructure examination using techniques like passive DNS and certificate pivoting.
Experience authoring detection logic using formats such as YARA, Sigma, or SIEM-native queries.
Excellent written communication skills capable of producing concise intelligence reports that drive action.
Existing professional network within the threat intelligence community with a background in bidirectional sharing.
Bachelor’s degree in a relevant field or an equivalent combination of education, training, and professional experience.
Ability to meet location-based hybrid policies requiring time in an office at least 25 percent of the time.

Nice to Have

Experience defending cloud-native, research-heavy environments utilizing AWS, GCP, Kubernetes, or machine learning infrastructure.
Prior work tracking state-sponsored adversaries where analysis directly shaped detection and incident response operations.
Familiarity with applying large language models or other artificial intelligence tools to accelerate intelligence workflows.
Public research contributions, open-source tool development, or conference speaking engagements in the cyber threat intelligence space.

Skills and Tools

Python
AWS
GCP
Kubernetes
YARA
Sigma
Snort/Suricata
SIEM-native queries
Malware and Infrastructure Analysis

Salary and Benefits

Annual compensation range between $320,000 and $405,000 USD.
Competitive compensation and benefits package.
Optional equity donation matching.
Generous vacation time and parental leave.
Flexible working hours.
Visa sponsorship provided where applicable.

About the Company

Anthropic is a public benefit corporation dedicated to building reliable, interpretable, and steerable artificial intelligence systems that benefit society. Functioning as a cohesive research and engineering organization, the company treats AI development as an empirical science akin to physics and biology. Employees work collaboratively in a dynamic environment designed to address the profound social and ethical implications of advanced technology.

How to Apply

Interested candidates should submit an application directly through the official Anthropic careers page.

Skills and tech stack

Questions candidates ask

What is the salary range for the Security Engineer - Threat Intel role?

The annual salary for this position ranges from $320,000 to $405,000 USD.

What level of experience is required for this position?

Candidates must have at least 5 years of hands-on professional experience in cyber threat intelligence, threat hunting, or intrusion analysis.

Is remote work permitted for this job?

Yes, the role is remote-friendly with office locations in New York City, San Francisco, and Washington, DC, subject to a hybrid policy requiring staff to be in an office at least 25% of the time.

Does Anthropic offer visa sponsorship for this role?

Yes, Anthropic does sponsor visas and works with an immigration lawyer to assist candidates receiving an offer.

What programming languages are required?

Candidates should be strong engineers capable of writing production-quality Python or similar languages for automation and data pipelines.

Ready to apply?

The application is on the official Anthropic careers page.

Apply on company site