Lead Detection & Response Engineer for Incident Response

EngineersOfAI; Zürich; Hybrid; CHF 120,000 - 180,000; Full time

Job summary

Anthropic is seeking a Senior Incident Response Engineer to lead incident response across multiple domains and help build detection and response capabilities from the ground up. You will collaborate with security and engineering teams to deploy tooling and tune detections, playbooks, and workflows for rapid incident handling.

The role requires experience with security incidents, cloud operations, and scripting (Python) with SQL query skills.

Qualifications

• Experience handling security incidents and investigating anomalies as part of a team.
• Working knowledge of EDR, SIEM, SOAR, or similar security tooling.
• A solid understanding of cloud environments and operations.
• Experience working with engineering teams in a SaaS environment.
• Proficiency with a scripting language such as Python and query languages such as SQL.
• Strong communication and collaboration skills.
• Able to lead projects with little guidance.
• Able to pick up new languages and technologies quickly.

Responsibilities

• Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack
• Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats
• Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly
• Review incident response metrics and procedures, and drive improvements
• Work across security and engineering teams
• Take part in an on-call rotation

Job description

Anthropic is seeking a Senior Incident Response Engineer to lead incident response across multiple domains and help build detection and response capabilities from the ground up. You will collaborate with security and engineering teams to deploy tooling and tune detections, playbooks, and workflows for rapid incident handling.

The role requires experience with security incidents, cloud operations, and scripting (Python) with SQL query skills.