Lead Incident Response & Threat Detection Engineer

Alex Loftus; Zürich; Hybrid; CHF 140,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Equity donation matching (optional)

Generous vacation and parental leave

Flexible working hours

Office space in SF

Job summary

Anthropic is hiring a Senior/Staff Security Engineer for Detection & Response to build and scale our incident response capabilities. You will lead investigations, design detections, and deploy tooling across cloud environments while working with SREs and researchers.

The role emphasizes collaboration, strong writing and communication skills, and the ability to lead projects with minimal guidance in a rapidly growing security program at a cross-functional company.

Qualifications

• Minimum education: Bachelor's degree or equivalent.
• 7+ years in software security, incident response, or threat hunting.
• Experience with large-scale Kubernetes environments and cloud deployments.
• Strong scripting and query language skills (Python, SQL).
• Proven ability to lead projects with minimal guidance.

Responsibilities

• Lead incident response across multiple domains and tech stacks.
• Build and deploy detection, playbooks, and automation tooling.
• Review incident metrics and drive security improvements.
• Collaborate with security and engineering teams; participate in on-call rotations.
• Develop detections and workflows to accelerate response times.

Skills

Python scripting

SQL querying

EDR

SIEM

SOAR

Cloud computing

Communication

Incident response

Leadership

Education

Bachelor's degree or higher

Tools

Kubernetes

Job description

Anthropic is hiring a Senior/Staff Security Engineer for Detection & Response to build and scale our incident response capabilities. You will lead investigations, design detections, and deploy tooling across cloud environments while working with SREs and researchers.

The role emphasizes collaboration, strong writing and communication skills, and the ability to lead projects with minimal guidance in a rapidly growing security program at a cross-functional company.