Security Engineer - Threat Intel

Threat Intelligence Engineer in the Detection & Response team at Anthropic, a hands-on practitioner on a small team tasked with spotting nation-state and advanced criminal actors who target a frontier AI lab. The engineer tracks actors and campaigns aimed at AI labs, cloud and the wider tech sector, builds pipelines that collect, enrich and push indicators into the detection stack, runs intelligence-led hunts across endpoint, cloud, identity and SaaS data, analyses malware, phishing infrastructure and attacker tooling, and works with detection engineers and responders to turn intelligence into rules and context. Curating feeds and building sharing relationships with peers, ISACs and government are part of it.

Anthropic wants five or more years in threat intelligence, hunting or intrusion analysis against sophisticated adversaries, deep knowledge of specific actors, production Python, and detection writing in YARA, Sigma or SIEM queries. Remote-friendly, with travel.