Security Engineer - Threat Intel

About this role

Anthropic seeks a hands-on Threat Intelligence Engineer to research adversaries targeting AI labs, build automated detection pipelines, and drive threat hunting operations. You'll translate intelligence into operational defenses while working with detection engineers and incident responders in a small, high-leverage security team.

What you'll do

• Research and track threat actors targeting AI labs and technology infrastructure, producing actionable intelligence reports
• Build and maintain automation pipelines to collect, enrich, and operationalize threat indicators into detection systems
• Conduct intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS environments
• Perform technical analysis of malware, phishing infrastructure, and attacker tools to extract indicators and TTPs
• Partner with detection and incident response teams to translate intelligence into detection rules and hunting hypotheses
• Curate and prioritize intelligence from commercial feeds, open source, and government sources aligned with threat models

What they're looking for

• Cyber threat intelligence and threat hunting (5+ years)
• Malware analysis and infrastructure analysis techniques
• Python programming and automation/data pipeline development
• Detection logic authoring (YARA, Sigma, Snort/Suricata, SIEM queries)
• Log analysis and technical investigation methods
• Clear technical writing and intelligence communication
• Cloud security (AWS/GCP, Kubernetes preferred)
• Nation-state and advanced criminal threat actor tracking

Benefits

• Competitive salary: $320,000–$405,000 USD annually
• Remote-friendly with locations in New York City, San Francisco, and Washington DC
• High-impact role at frontier of AI security
• Broad latitude to shape threat intelligence processes
• Collaboration with specialized detection and incident response teams