Technical Cyber Threat Investigator

Technical Cyber Threat Investigator on Anthropic's Threat Intelligence team, detecting, investigating and disrupting attempts to use its AI systems for malicious cyber operations such as malware development, social engineering and influence operations. The investigator builds abuse signals and tracking methods to find sophisticated actors, writes intelligence reports on new attack vectors and actor TTPs targeting LLM systems, analyses threats across platforms using open sources, dark web monitoring and internal data, turns findings into broader safety improvements, publishes trend reports and works with external intelligence partners and government.

The team wants SQL and Python for analysis and detection, an understanding of how LLMs can be misused, expertise in cyber threat intelligence or abuse detection, experience tracking actors across surface, deep and dark web, and familiarity with MITRE ATT&CK. Remote-friendly, with travel; weekend escalations may occur.