Threat Collections Engineer

About this role

Anthropic seeks a Threat Collections Engineer to build infrastructure powering threat discovery, including detection systems, data pipelines, and investigator tooling. You'll take projects from concept to production while working with security investigators to scale automated threat identification capabilities.

What you'll do

• Build automated detection systems that identify abusive behavior using multiple data signals
• Develop and maintain YARA rule infrastructure with validation and testing tools
• Create integrations with external threat intelligence platforms via MCP servers
• Build data pipelines ingesting intelligence from RSS feeds, CTI sources, and partner sharing
• Develop behavioral analytics using DBT frameworks and audit logging systems
• Establish feedback loops with investigators to tune detections and reduce false positives

What they're looking for

• Python and SQL programming
• Data pipeline orchestration tools (Airflow, DBT, or similar)
• Threat intelligence concepts (IOCs, YARA rules, correlation)
• External API integration and data ingestion
• Web scraping and data extraction
• MCP server development
• Behavioral analytics or anomaly detection
• LLM capabilities and automation

Benefits

• Annual salary: $300,000–$320,000 USD
• Remote-friendly with offices in San Francisco and Washington, DC
• 25% minimum in-office requirement
• Visa sponsorship available
• Work on high-impact AI safety and threat intelligence
• Small, focused team environment