Security Engineer, Detection & Response

Detection and Response engineer at Anthropic who builds monitoring for threats, investigates incidents and coordinates response with other teams. The engineer leads incident response for everything from external attacks to insider threats across the whole technology stack, develops new tooling that may use large language models for detection and investigation, writes and tunes detections, playbooks and workflows, reviews response metrics and procedures, and takes part in an on-call rotation.

Anthropic is looking for three or more years of software engineering or five or more in detection engineering, incident response or threat hunting, a good grasp of cloud environments, experience with EDR, SIEM or SOAR tools and with handling incidents as part of a team. Kubernetes investigations, Python and SQL, malware analysis and forensics are pluses.