Anthropic
Security Engineer, Detection & Response
$300K–$405K
San Francisco, CA +4 · Full-time · Posted Nov 10, 2025
- Location
- San Francisco, CA
New York City, NY
Seattle, WA
Washington, DC
San Francisco, California, United States - Experience
- 3+ years of software engineering experience, with security experience a plus, and/or 5+ years of detection engineering, incident response, or threat hunting experience. The posting also says required years correlate with internal job level requirements.
- Education
- Bachelor’s degree or an equivalent combination of education, training, and/or experience. Required field of study: a field relevant to the role, as demonstrated through coursework, training, or professional experience.
- Visa sponsorship
- Visa sponsorship is available, but not for every role or candidate; if an offer is made, Anthropic will make every reasonable effort to obtain a visa and provides immigration counsel.
About the job
Leads incident response and builds detection tools, workflows, and procedures to identify and respond to cybersecurity threats across Anthropic’s technology stack.
What you'll do
- Lead incident response for external attacks and insider threats.
- Develop detection, investigation, and response tooling, potentially using Large Language Models; create and optimize detections, playbooks, and workflows.
- Review incident response metrics and procedures, drive improvements, and collaborate with security and engineering teams.
What they ask for
- 3+ years of software engineering experience, with security experience a plus, and/or 5+ years of detection engineering, incident response, or threat hunting experience.
- Solid understanding of cloud environments and operations; experience working with engineering teams in a SaaS environment.
- Experience handling security incidents and investigating anomalies as part of a team.
- Knowledge of EDR, SIEM, SOAR, or related security tools; strong communication, collaboration, and project leadership skills.
Nice to have
- Experience in security operations or investigations involving large-scale Kubernetes environments.
- Proficiency in Python and query languages such as SQL; experience in detection, threat intelligence, malware analysis, infrastructure as code, or forensics.
Pay
$300,000 — $405,000 USD (base salary)
Tools
Large Language Models, Kubernetes, Python, SQL, EDR, SIEM, SOAR
AI focus
Develop tooling that may leverage Large Language Models to enhance detection, investigation, and response capabilities.
Model-written summary · the original posting is authoritative