Staff Security Engineer, Detection & Response

Anthropic is a company dedicated to creating reliable, interpretable, and steerable AI systems. Their mission is to ensure that AI is safe and beneficial for users and society. The company is growing rapidly, with a team of researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. The role of a Staff Security Engineer, Detection & Response, is crucial as the company's AI models become more advanced, attracting increased interest from potential attackers. The Detection and Response (D&R) team is responsible for identifying and responding to threats across all layers of Anthropic's technology stack. The main day-to-day responsibilities of a Staff Security Engineer, Detection & Response, include leading incident response across various domains, from external attacks to insider threats. This involves building and deploying tooling, including tools that use large language models, to enhance threat detection and response. The role also requires creating and tuning detections, playbooks, and workflows to quickly identify and respond to incidents. Additionally, the engineer will review incident response metrics and procedures, drive improvements, and collaborate with security and engineering teams. The role also includes participating in an on-call rotation. To qualify for this role, candidates must have experience handling security incidents and investigating anomalies as part of a team. A working knowledge of EDR, SIEM, SOAR, or similar security tooling is essential, along with a solid understanding of cloud environments and operations. Proficiency in a scripting language such as Python and query languages such as SQL is required. Strong communication and collaboration skills are also necessary, as is the ability to lead projects with minimal guidance and quickly learn new languages and technologies. A Bachelor's degree or an equivalent combination of education, training, and/or experience in a relevant field is required. Nice-to-have skills include 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience. Experience with security operations or investigations in large-scale Kubernetes environments, analyzing attack behavior, and prototyping high-quality detections is also beneficial. Additionally, experience with threat intelligence, malware analysis, infrastructure as code, or forensics is valued. The role is based in a hybrid work environment, with a requirement to be in the office at least 25% of the time. Anthropic sponsors visas for eligible candidates and encourages applications from diverse backgrounds, emphasizing the importance of representation in AI research. What the role asks for: - Experience in handling security incidents and investigating anomalies in a team - Working knowledge of EDR, SIEM, SOAR or similar security tools - Solid understanding of cloud environments and operations - Experience in collaborating with Engineering Teams in a SaaS environment - Knowledge in a scripting language like Python and query languages like SQL - Strong communication and collaboration skills - Ability to lead projects with little guidance - Ability to quickly learn new languages and technologies - Bachelor degree or an equivalent combination of education, training and/or experience in a relevant field